2596
CWEs in this view Total CWEs
Views 0 out of 50
Total 25 out of 1362
View-1358: Weaknesses in SEI ETF Categories of Security Vulnerabilities in
ICS
View ID : 1358
Type : Graph
Objective
CWE entries in this view (graph) are associated with the Categories of Security Vulnerabilities in
ICS, as published by the Securing Energy Infrastructure Executive Task Force (SEI ETF) in March
2022. Weaknesses and categories in this view are focused on issues that affect ICS (Industrial
Control Systems) but have not been traditionally covered by CWE in the past due to its earlier
emphasis on enterprise IT software. Note: weaknesses in this view are based on "Nearest IT
Neighbor" recommendations and other suggestions by the CWE team. These relationships are
likely to change in future CWE versions.
Audience
Hardware Designers
ICS/OT hardware designers can use this view to ensure a minimal set of weaknesses that should
be avoided or mitigated during the design process.
Product Vendors
Product vendors can use this view to ensure that all aspects of the product lifecycle address
these weaknesses.
Assessment Tool Vendors
Assessment tool vendors that help to assess potential weaknesses, or avoid them, can use this
view to improve their tool's coverage to address more weaknesses.
Academic Researchers
Academic researchers can use this view to identify potential research opportunities that could
produce better methods for detection or avoidance of weaknesses in ICS/OT products.
Membership
Nature Type ID Name Page
HasMember 1359 ICS Communications 2497
HasMember 1360 ICS Dependencies (& Architecture) 2498
HasMember 1361 ICS Supply Chain 2499
HasMember 1362 ICS Engineering (Constructions/Deployment) 2499
HasMember 1363 ICS Operations (& Maintenance) 2500
Notes
Relationship
Relationships in this view are not authoritative and subject to change. See Maintenance notes.
Maintenance
This view was created in CWE 4.7 to facilitate and illuminate discussion about weaknesses in
ICS with [REF-1248] as a starting point. After the release of CWE 4.9 in October 2022, this has
been under active review by members of the "Boosting CWE" subgroup of the CWE-CAPEC ICS/
OT Special Interest Group (SIG). Relationships are still subject to change. In addition, there may
CWE Version 4.14
CWE-1387: Weaknesses in the 2022 CWE Top 25 Most Dangerous Software Weaknesses
CWE-1387: Weaknesses in the 2022 CWE Top
25 Most Dangerous Software Weaknesses