2600
View-1424: Weaknesses Addressed by ISA/IEC 62443 Requirements
View ID : 1424
Type : Implicit
Objective
This view (slice) covers weaknesses that are addressed by following requirements in the ISA/IEC
62443 series of standards for industrial automation and control systems (IACS). Members of the
CWE ICS/OT SIG analyzed a set of CWEs and mapped them to specific requirements covered by
ISA/IEC 62443. These mappings are recorded in Taxonomy_Mapping elements.
Filter
/Weakness_Catalog/Weaknesses/Weakness[./Taxonomy_Mappings/Taxonomy_Mapping/
@Taxonomy_Name='ISA/IEC 62443']
Membership
Nature Type ID Name Page
HasMember 1424 Weaknesses Addressed by ISA/IEC 62443 Requirements 2600
Notes
Maintenance
The Taxonomy_Mappings to ISA/IEC 62443 were added between CWE 4.9 and CWE 4.14, but
some mappings are still under review and might change in future CWE versions. These draft
mappings were performed by members of the "Mapping CWE to 62443" subgroup of the CWE ICS/
OT Special Interest Group (SIG).
Metrics
CWEs in this view Total CWEs
Weaknesses 39 out of 938
Categories 0 out of 374
Views 0 out of 50
Total 39 out of 1362
View-1425: Weaknesses in the 2023 CWE Top 25 Most Dangerous Software
Weaknesses
View ID : 1425
Type : Graph
Objective
CWE entries in this view are listed in the 2023 CWE Top 25 Most Dangerous Software
Weaknesses.
Audience
Software Developers
By following the CWE Top 25, developers are able to significantly reduce the number of
weaknesses that occur in their software.
Product Customers
Customers can use the weaknesses in this view in order to formulate independent evidence of a
claim by a product vendor to have eliminated / mitigated the most dangerous weaknesses.
Educators
Educators can use this view to focus curriculum and teachings on the most dangerous
weaknesses.
CWE Version 4.14
CWE-2000: Comprehensive CWE Dictionary
CWE-2000: Comprehensive CWE Dictionary