MITRE shares a list of the most dangerous programming, design, and architectural security flaws plaguing hardware this year.
Such weaknesses can be found in programming, design, or hardware architecture, leading to exploitable vulnerabilities and exposing systems to attacks.
This list is the result of the non-profit organization MITRE working with the Hardware CWE Special Interest Group (SIG), a community of individuals representing organizations from “hardware design, manufacturing, research, and security sectors, as well as academia and government.”
See also: Facebook: Photos of its prototype VR hardware
See also: Raspberry Pi Tutorial: Versions, Hardware, Software (Part 1)
Unranked list of hardware vulnerabilities
The main goal of MITRE's 2021 CWE Most Significant Hardware Vulnerabilities is to increase awareness of common hardware vulnerabilities through the Common Weaknesses (CWE) enumeration.
It can also help prevent hardware security issues at the source by educating programmers and designers on how to eliminate critical errors early in the product development lifecycle.
Additionally, test engineers and security analysts can use the list to prepare for security testing and assessment plans.
The list embedded below provides information on the ten most concerning hardware security vulnerabilities from 96 hardware entries in the CWE corpus.
"Hardware consumers could use the list to help themselves and demand more secure hardware products from their vendors," MITRE added.
See also: Enable or disable hardware acceleration in Discord
“Finally, managers and CIOs can use the list as a benchmark to measure progress in their efforts to secure their hardware and identify where to direct resources to deploy security tools or automation processes that mitigate a broad class of vulnerabilities by eliminating the underlying cause.”
In July, MITRE released its list of the 25 most common and dangerous vulnerabilities of the year that have plagued software for the past two years. Last May, CISA and the FBI also published a list of the top 10 most exploited security flaws between 2016 and 2019.
Information source: bleepingcomputer.com
