CWE Most Important Hardware Weaknesses
The decision to update the CWE Most Important Hardware Weaknesses List was driven by significant changes in the hardware security landscape and the evolution of the Hardware CWE corpus since the last update in October 2021 (based on CWE version 4.6). Since then and through CWE version 4.17, the CWE hardware view has introduced several new and updated entries, including the addition of new classes, categories, and base weaknesses relevant to emerging hardware security concerns. Additionally, there has been increased attention to hardware security in recent years, resulting in a greater availability of data to inform the analysis and prioritization of hardware weaknesses. If you are interested in joining the Hardware CWE SIG, please email [email protected]. AcknowledgementsThe 2025 CWE Hardware team includes (in alphabetical order by last name): Steve Christey Coley, Bob Heinemann, Gananand Kini, and Alec Summers. We extend our deepest gratitude to the 2025 MIHW Working Group (a subgroup of HW SIG members), whose dedication and hard work made the weakness data collection (WDC) possible. We are also sincerely thankful to the respondents of the MIHW polls for sharing their expert insights, and to all members of the HW SIG for their ongoing support and contributions (names are in alphabetical order by first name).
… and many others who chose to remain anonymous. |
|||||||||||||||
