2171
The product's data removal process does not completely delete all data and potentially sensitive
information within hardware components.
Extended Description
Physical properties of hardware devices, such as remanence of magnetic media, residual charge
of ROMs/RAMs, or screen burn-in may still retain sensitive data after a data removal process has
taken place and power is removed.
Recovering data after erasure or overwriting is possible due to a phenomenon called data
remanence. For example, if the same value is written repeatedly to a memory location, the
corresponding memory cells can become physically altered to a degree such that even after the
original data is erased that data can still be recovered through physical characterization of the
memory cells.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 226 Sensitive Information in Resource Not Removed Before
Reuse