2504
Nature Type ID Name Page
HasMember 319 Cleartext Transmission of Sensitive Information 1358 779
HasMember 325 Missing Cryptographic Step 1358 794
HasMember 327 Use of a Broken or Risky Cryptographic Algorithm 1358 799
HasMember 330 Use of Insufficiently Random Values 1358 814
HasMember 336 Same Seed in Pseudo-Random Number Generator
(PRNG)
1358 832
HasMember 337 Predictable Seed in Pseudo-Random Number
Generator (PRNG)
1358 834
HasMember 341 Predictable from Observable State 1358 843
HasMember 349 Acceptance of Extraneous Untrusted Data With Trusted
Data
1358 861
HasMember 358 Improperly Implemented Security Check for Standard 1358 881
HasMember 362 Concurrent Execution using Shared Resource with
Improper Synchronization ('Race Condition')
1358 888
HasMember 377 Insecure Temporary File 1358 925
HasMember 384 Session Fixation 1358 936
HasMember 648 Incorrect Use of Privileged APIs 1358 1428
HasMember 787 Out-of-bounds Write 1358 1661
HasMember 1189 Improper Isolation of Shared Resources on System-ona-
Chip (SoC)
1358 1976
HasMember 1303 Non-Transparent Sharing of Microarchitectural
Resources
1358 2174
HasMember 1393 Use of Default Password 1358 2273
Notes
Relationship
Relationships in this category are not authoritative and subject to change. See Maintenance
notes.
Maintenance
This category was created in CWE 4.7 to facilitate and illuminate discussion about weaknesses
in ICS with [REF-1248] as a starting point. After the release of CWE 4.9 in October 2022, this
has been under active review by members of the "Boosting CWE" subgroup of the CWE-CAPEC
ICS/OT Special Interest Group (SIG). Relationships are still subject to change. In addition, there
may be some issues in [REF-1248] that are outside of the current scope of CWE, which will
require consultation with many CWE stakeholders to resolve.
References
[REF-1259]Wikipedia. "Transport Layer Security". < https://en.wikipedia.org/wiki/
Transport_Layer_Security >.
[REF-1248]Securing Energy Infrastructure Executive Task Force (SEI ETF). "Categories of
Security Vulnerabilities in ICS". 2022 March 9. < https://inl.gov/wp-content/uploads/2022/03/SEIETF-
NCSV-TPT-Categories-of-Security-Vulnerabilities-ICS-v1_03-09-22.pdf >.
Category-1367: ICS Dependencies (& Architecture): External Physical Systems
Category ID : 1367
Summary
CWE Version 4.14
CWE-1368: ICS Dependencies (& Architecture): External Digital Systems
CWE-1368: ICS Dependencies (& Architecture): External Digital Systems