Miter Corp releases cwe list of only hardware-related vulnerabilities

The Miter Corporation has released a new version of its Common Weakness Enumeration list that now includes hardware-related vulnerabilities in addition to software.

It concerns version 4.0 of the cwe database. That, along with the Common Vulnerability Enumeration list, is a system that lists known software vulnerabilities. Cve codes are regularly used to identify specific vulnerabilities and bugs in software. The cwe list describes more generally that there is a weakness such as a buffer overflow in software. The Miter Corporation, which maintains the cve and cwe lists, has now released v4.0 of the database. With this, the organization in their own words ‘helping the security industry avoid common hardware design errors’.

The list now also has a separate category with hardware vulnerabilities. They are divided into different subcategories. This concerns, for example, memory and storage problems, vulnerabilities in connections, or weaknesses in power supplies. The Miter Corporation has also simplified the display of other software vulnerabilities and built in a better search function.