2543
Nature Type ID Name Page
HasMember 757 Selection of Less-Secure Algorithm During Negotiation
('Algorithm Downgrade')
1400 1581
HasMember 778 Insufficient Logging 1400 1638
HasMember 807 Reliance on Untrusted Inputs in a Security Decision 1400 1714
HasMember 1039 Automated Recognition Mechanism with Inadequate
Detection or Handling of Adversarial Input Perturbations
1400 1873
HasMember 1248 Semiconductor Defects in Hardware Logic with
Security-Sensitive Implications
1400 2049
HasMember 1253 Incorrect Selection of Fuse Values 1400 2058
HasMember 1269 Product Released in Non-Release Configuration 1400 2098
HasMember 1278 Missing Protection Against Hardware Reverse
Engineering Using Integrated Circuit (IC) Imaging
Techniques
1400 2118
HasMember 1291 Public Key Re-Use for Signing both Debug and
Production Code
1400 2145
HasMember 1318 Missing Support for Security Features in On-chip
Fabrics or Buses
1400 2197
HasMember 1319 Improper Protection against Electromagnetic Fault
Injection (EM-FI)
1400 2199
HasMember 1326 Missing Immutable Root of Trust in Hardware 1400 2212
HasMember 1338 Improper Protections Against Hardware Overheating 1400 2240
References
[REF-1330]MITRE. "CVE --> CWE Mapping Guidance - Quick Tips". 2021 March 5. < https://
cwe.mitre.org/documents/cwe_usage/quick_tips.html >.
Category-1414: Comprehensive Categorization: Randomness
Category ID : 1414
Summary
Weaknesses in this category are related to randomness.
Membership
Nature Type ID Name Page
MemberOf 1400 Comprehensive Categorization for Software Assurance
Trends
1400 2598
HasMember 6 J2EE Misconfiguration: Insufficient Session-ID Length 1400 2
HasMember 323 Reusing a Nonce, Key Pair in Encryption 1400 790
HasMember 329 Generation of Predictable IV with CBC Mode 1400 811
HasMember 330 Use of Insufficiently Random Values 1400 814
HasMember 331 Insufficient Entropy 1400 821
HasMember 332 Insufficient Entropy in PRNG 1400 823
HasMember 333 Improper Handling of Insufficient Entropy in TRNG 1400 825
HasMember 334 Small Space of Random Values 1400 827
HasMember 335 Incorrect Usage of Seeds in Pseudo-Random Number
Generator (PRNG)
1400 829
HasMember 336 Same Seed in Pseudo-Random Number Generator
(PRNG)
1400 832
CWE Version 4.14
CWE-1415: Comprehensive Categorization: Resource Control
CWE-1415: Comprehensive Categorization: Resource Control