1448
Nature Type ID Name Page
MemberOf 975 SFP Secondary Cluster: Architecture 888 2406
MemberOf 1348 OWASP Top Ten 2021 Category A04:2021 - Insecure
Design
1344 2491
MemberOf 1418 Comprehensive Categorization: Violation of Secure
Design Principles
1400 2549
Notes
Maintenance
The Taxonomy_Mappings to ISA/IEC 62443 were added in CWE 4.10, but they are still under
review and might change in future CWE versions. These draft mappings were performed by
members of the "Mapping CWE to 62443" subgroup of the CWE-CAPEC ICS/OT Special Interest
Group (SIG), and their work is incomplete as of CWE 4.10. The mappings are included to
facilitate discussion and review by the broader ICS/OT community, and they are likely to change
in future CWE versions.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
ISA/IEC 62443 Part 4-1 Req SD-3
ISA/IEC 62443 Part 4-1 Req SD-4
ISA/IEC 62443 Part 4-1 Req SI-1
References
[REF-196]Jerome H. Saltzer and Michael D. Schroeder. "The Protection of Information in Computer
Systems". Proceedings of the IEEE 63. 1975 September. < http://web.mit.edu/Saltzer/www/
publications/protection/ >.
[REF-546]Sean Barnum and Michael Gegick. "Design Principles". 2005 September 9. < https://
web.archive.org/web/20220126060046/https://www.cisa.gov/uscert/bsi/articles/knowledge/
principles/design-principles >.2023-04-07.
[REF-542]Jon Postel, Editor. "RFC: 793, TRANSMISSION CONTROL PROTOCOL". 1981
September. Information Sciences Institute. < https://www.ietf.org/rfc/rfc0793.txt >.2023-04-07.
[REF-1138]Stewart Smith. "CVE-2019-6260: Gaining control of BMC from the host processor".
2019. < https://www.flamingspork.com/blog/2019/01/23/cve-2019-6260:-gaining-control-of-bmcfrom-
the-host-processor/ >.
[REF-1314]ICS-CERT. "ICS Alert (ICS-ALERT-20-063-01): SweynTooth Vulnerabilities". 2020
March 4. < https://www.cisa.gov/news-events/ics-alerts/ics-alert-20-063-01 >.2023-04-07.
[REF-1315]Matheus E. Garbelini, Sudipta Chattopadhyay, Chundong Wang, Singapore University
of Technology and Design. "Unleashing Mayhem over Bluetooth Low Energy". 2020 March 4. <
https://asset-group.github.io/disclosures/sweyntooth/ >.2023-01-25.
CWE-662: Improper Synchronization
Weakness ID : 662
Structure : Simple
Abstraction : Class
Description
The product utilizes multiple threads or processes to allow temporary access to a shared resource
that can only be exclusive to one process at a time, but it does not properly synchronize these
actions, which might cause simultaneous accesses of this resource by multiple threads or
processes.
CWE Version 4.14
CWE-662: Improper Synchronization
CWE-662: Improper Synchronization