CWE-920 功耗限制不当

Improper Restriction of Power Consumption

结构: Simple

Abstraction: Base

状态: Incomplete

被利用可能性: unkown

基本描述

The software operates in an environment in which power is a limited resource that cannot be automatically replenished, but the software does not properly restrict the amount of power that its operation consumes.

扩展描述

In environments such as embedded or mobile devices, power can be a limited resource such as a battery, which cannot be automatically replenished by the software itself, and the device might not always be directly attached to a reliable power source. If the software uses too much power too quickly, then this could cause the device (and subsequently, the software) to stop functioning until power is restored, or increase the financial burden on the device owner because of increased power costs.

Normal operation of an application will consume power. However, in some cases, an attacker could cause the application to consume more power than intended, using components such as:

相关缺陷

• cwe_Nature: ChildOf cwe_CWE_ID: 400 cwe_View_ID: 1000 cwe_Ordinal: Primary

• cwe_Nature: ChildOf cwe_CWE_ID: 400 cwe_View_ID: 1003 cwe_Ordinal: Primary

• cwe_Nature: ChildOf cwe_CWE_ID: 400 cwe_View_ID: 699 cwe_Ordinal: Primary

适用平台

Language: {'cwe_Class': 'Language-Independent', 'cwe_Prevalence': 'Undetermined'}

Paradigm: {'cwe_Name': 'Mobile', 'cwe_Prevalence': 'Undetermined'}

常见的影响

范围	影响	注释
Availability	['DoS: Resource Consumption (Other)', 'DoS: Crash, Exit, or Restart']	The power source could be drained, causing the application - and the entire device - to cease functioning.

文章来源于互联网:scap中文网