Discover weaknesses in ICS systems related to common components that may harbor vulnerabilities, potentially leading to widespread incidents.
There are weaknesses within this particular category that can be linked to the "Common Mode Frailties" category mentioned in the SEI ETF "Categories of Security Vulnerabilities in ICS" published in March 2022. According to this publication, a majority of ICS systems are built using commonly available components manufactured by various companies. It is possible that one or more of these components may have vulnerabilities, which could lead to a widespread incident. It is important to note that the suggestions provided by the report's "Nearest IT Neighbor" recommendations and the CWE team are included in this category. However, it is worth mentioning that these relationships may be subject to change in future versions of the CWE.