2257
Bill of Materials (SBOM)". 2021 October 1. < https://www.ntia.gov/files/ntia/publications/
ntia_sbom_framing_2nd_edition_20211021.pdf >.
[REF-1097]Brian Krebs. "Zyxel Flaw Powers New Mirai IoT Botnet Strain". 2020 March 0. < https://
krebsonsecurity.com/2020/03/zxyel-flaw-powers-new-mirai-iot-botnet-strain/ >.
CWE-1384: Improper Handling of Physical or Environmental Conditions
Weakness ID : 1384
Structure : Simple
Abstraction : Class
Description
The product does not properly handle unexpected physical or environmental conditions that occur
naturally or are artificially induced.
Extended Description
Hardware products are typically only guaranteed to behave correctly within certain physical limits
or environmental conditions. Such products cannot necessarily control the physical or external
conditions to which they are subjected. However, the inability to handle such conditions can
undermine a product's security. For example, an unexpected physical or environmental condition
may cause the flipping of a bit that is used for an authentication decision. This unexpected
condition could occur naturally or be induced artificially by an adversary.
Physical or environmental conditions of concern are:
• Atmospheric characteristics: extreme temperature ranges, etc.
• Interference: electromagnetic interference (EMI), radio frequency interference (RFI), etc.
• Assorted light sources: white light, ultra-violet light (UV), lasers, infrared (IR), etc.
• Power variances: under-voltages, over-voltages, under-current, over-current, etc.
• Clock variances: glitching, overclocking, clock stretching, etc.
• Component aging and degradation
• Materials manipulation: focused ion beams (FIB), etc.
• Exposure to radiation: x-rays, cosmic radiation, etc.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 703 Improper Check or Handling of Exceptional Conditions 1535
ParentOf 1247 Improper Protection Against Voltage and Clock Glitches 2044
ParentOf 1261 Improper Handling of Single Event Upsets 2079
ParentOf 1332 Improper Handling of Faults that Lead to Instruction Skips 2227
ParentOf 1351 Improper Handling of Hardware Behavior in Exceptionally
Cold Environments