Base weakness
Draft
CWE-123: Write-what-where Condition
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
Last updated
40
Recorded CVEs
With this primary weakness
1
KEVs
In the CISA KEV catalog
High
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
CWE-123 (Write-what-where Condition) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.