CWEweakness

CWE-1351 Improper Handling of Hardware Behavior in Exceptionally Cold Environments

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The hardware device, or the firmware running on it, is missing or has incorrect protection mechanisms to maintain goals of security primitives when the device is cooled below standard operating temperatures.

Common consequences

• Integrity, Authentication: Varies by Context, Unexpected State — This may result in a weakness when the starting state of the volatile memory is being relied upon for a security decision. Consequences of this weakness are highly contextual.

Potential mitigations

• [Architecture and Design] The system should account for security primitive behavior when cooled outside standard temperatures.

Related

Attack pattern · CAPEC (2)

  • CAPEC-624 Hardware Fault Injection attack pattern
  • CAPEC-625 Mobile Device Fault Injection attack pattern

Child of · CWE (1)

  • CWE-1384 Improper Handling of Physical or Environmental Conditions weakness

Referenced by CAPEC · weakness (2)

  • CAPEC-624 Hardware Fault Injection attack pattern
  • CAPEC-625 Mobile Device Fault Injection attack pattern