CWEweakness
CWE-509 Replicating Malicious Code (Virus or Worm)
- Abstraction
- Base
- Structure
- Simple
- Status
- Incomplete
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
Replicating malicious code, including viruses and worms, will attempt to attack other systems once it has successfully compromised the target system or the product.
Common consequences
• Confidentiality, Integrity, Availability: Execute Unauthorized Code or Commands
Potential mitigations
• [Operation] Antivirus software scans for viruses or worms.
• [Installation] Always verify the integrity of the software that is being installed.
Related
Child of · CWE (1)
- CWE-507 Trojan Horse weakness
Referenced by CVE · weakness (1)
- CVE-2017-16127 The module pandora-doomsday infects other modules. vulnerability
Referenced by OWASP · mapped cwe (1)
- A08:2025 Software or Data Integrity Failures Top 10 2025