Base weakness
Incomplete
CWE-1110: Incomplete Design Documentation
The product's design documentation does not adequately describe control flow, data flow, system initialization, relationships between tasks, components, rationales, or other important aspects of the design.
Last updated
0
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
CWE-1110 (Incomplete Design Documentation) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.
Common consequences
What can happen when CWE-1110 is exploited.
Reduce Maintainability
Affects: Other
Increase Analytical Complexity
Affects: Other
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.
Architecture and Design
Documentation
Applies to
Technologies
ICS/OT