CWE-506 — Embedded Malicious Code
CWE-506: Embedded Malicious Code
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Class |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
The product contains code that appears to be malicious in nature.
Malicious flaws have acquired colorful names, including Trojan horse, trapdoor, timebomb, and logic-bomb. A developer might insert malicious code with the intent to subvert the security of a product or its host system at some time in the future. It generally refers to a program that performs a useful service but exploits rights of the program's user in a way the user does not intend.
Common consequences
- Confidentiality, Integrity, Availability: Execute Unauthorized Code or Commands
Mitigations
Implementation — Remove the malicious code and start an effort to ensure that no more malicious code exists. This may require a detailed review of all code, as it is possible to hide a serious attack in only one or two lines of code. These lines may be located almost anywhere in an application and may have been intentionally obfuscated by the attacker.
References
- CWE page: https://cwe.mitre.org/data/definitions/506.html
- CWE list: https://cwe.mitre.org/data/index.html