目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-1313 类漏洞列表 1

CWE-1313 类弱点 1 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-1313 属于硬件安全漏洞，指设备在运行时意外激活了测试或调试逻辑。攻击者通常利用此特性绕过正常操作限制，篡改硬件状态，从而窃取敏感数据或破坏系统完整性。开发者应避免在生产固件中暴露调试接口，通过物理熔断、安全启动机制及严格的访问控制，确保调试功能仅在受控开发环境中启用，防止运行时被恶意利用。

MITRE CWE 官方描述
CWE：CWE-1313 Hardware Allows Activation of Test or Debug Logic at Runtime 英文：在运行时，硬件允许激活测试或调试逻辑（feature），从而允许更改硬件的状态。此功能可能改变系统的预期行为，并允许对手篡改和泄露敏感数据。 对手可以利用在正常运行期间通过硬件可访问的测试或调试逻辑（feature）来修改系统的预期行为。例如，可访问的测试/调试模式（Test/debug mode）可能允许对任何系统数据进行读写访问。在总线上的发送/接收操作期间使用错误注入（error injection，一种常见的测试/调试功能），数据可能被修改以产生非预期的消息。同样，由于此类功能允许访问秘密信息，机密性也可能受到损害。
常见影响 (1)
Confidentiality, Integrity, Availability Modify Memory, Read Memory, DoS: Crash, Exit, or Restart, DoS: Instability, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory), DoS: Resource Consumption (Other), Execute Unauthorized Code or Commands, Gain Privileges or Assume Identity, Bypass Protection Mechanism, Alter Execution Logic, Quality Degradation, Unexpected State, Reduce Performance, Reduce Reliability
缓解措施 (3)
Architecture and Design Insert restrictions on when the hardware's test or debug features can be activated. For example, during normal operating modes, the hardware's privileged modes that allow access to such features cannot be activated. Configuring the hardware to only enter a test or debug mode within a window of opportunity such as during boot or configuration stage. The result is disablement of such test/debug feat…
Implementation Insert restrictions on when the hardware's test or debug features can be activated. For example, during normal operating modes, the hardware's privileged modes that allow access to such features cannot be activated. Configuring the hardware to only enter a test or debug mode within a window of opportunity such as during boot or configuration stage. The result is disablement of such test/debug feat…
Integration Insert restrictions on when the hardware's test or debug features can be activated. For example, during normal operating modes, the hardware's privileged modes that allow access to such features cannot be activated. Configuring the hardware to only enter a test or debug mode within a window of opportunity such as during boot or configuration stage. The result is disablement of such test/debug feat…
CVE ID 标题 CVSS 风险等级 Published
CVE-2025-2919 Netis Systems WF-2404 安全漏洞 — WF-2404 6.8 Medium 2025-03-28

CWE-1313 是常见的弱点类别，本平台收录该类弱点关联的 1 条 CVE 漏洞。