CWE-511 — Logic/Time Bomb
CWE-511: Logic/Time Bomb
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
The product contains code that is designed to disrupt the legitimate operation of the product (or its environment) when a certain time passes, or when a certain logical condition is met.
When the time bomb or logic bomb is detonated, it may perform a denial of service such as crashing the system, deleting critical data, or degrading system response time. This bomb might be placed within either a replicating or non-replicating Trojan horse.
Common consequences
- Other, Integrity: Varies by Context, Alter Execution Logic
Mitigations
Installation — Always verify the integrity of the product that is being installed.
References
- CWE page: https://cwe.mitre.org/data/definitions/511.html
- CWE list: https://cwe.mitre.org/data/index.html