CWEweakness

CWE-511 Logic/Time Bomb

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product contains code that is designed to disrupt the legitimate operation of the product (or its environment) when a certain time passes, or when a certain logical condition is met.

Common consequences

• Availability, Integrity: DoS: Crash, Exit, or Restart, Varies by Context, Alter Execution Logic — When the time bomb or logic bomb is detonated, it may perform a denial of service such as crashing the system, deleting critical data, or degrading system response time.

Potential mitigations

• [Installation] Always verify the integrity of the product that is being installed.

Detection methods

• Automated Static Analysis: Conduct a code coverage analysis using live testing, then closely inspect any code that is not covered.

Related

Child of · CWE (1)

  • CWE-506 Embedded Malicious Code weakness

Referenced by CVE · weakness (1)

  • CVE-2023-52360 Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity. vulnerability