Base weakness
Incomplete
CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic
Faulty finite state machines (FSMs) in the hardware logic allow an attacker to put the system in an undefined state, to cause a denial of service (DoS) or gain privileges on the victim's system.
Last updated
5
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
The functionality and security of the system heavily depend on the implementation of FSMs. FSMs can be used to indicate the current security state of the system. Lots of secure data operations and data transfers rely on the state reported by the FSM.
Real-world CVEs
5 recorded CVEs are caused by CWE-1245 (Improper Finite State Machines (FSMs) in Hardware Logic). The highest-severity and most recent are shown first. 1 new CWE-1245 CVE has been recorded so far in 2026 (2 in 2025).