Common Weakness Enumeration

CWE-511

Weakness Allowed

Logic/Time Bomb

Abstraction: Base · Status: Incomplete

API response cwe.mitre.org

The product contains code that is designed to disrupt the legitimate operation of the product (or its environment) when a certain time passes, or when a certain logical condition is met.

Mapping guidance

This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.

Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

Relationships and members
ChildOf: CWE-506 · View CWE-1000
Modes of introduction
Architecture and Design Distribution

This bomb might be placed within either a replicating or non-replicating Trojan horse.

Implementation
Detection methods

Automated Static Analysis

Conduct a code coverage analysis using live testing, then closely inspect any code that is not covered.

Notes

Relationship

It is suspected that malicious code can often be characterized using other "regular" weaknesses related to insecure behavior. However, this has not been closely investigated.

Content history
Submission: Landwehr · 2006-07-19 · CWE Draft 3
Modification: Eric Dalci · Cigital · 2008-07-01 · CWE 1.0

updated Potential_Mitigations, Time_of_Introduction

Modification: CWE Content Team · MITRE · 2008-09-08 · CWE 1.0

updated Relationships, Taxonomy_Mappings

Modification: CWE Content Team · MITRE · 2008-10-14 · CWE 1.0.1

updated Description

Modification: CWE Content Team · MITRE · 2011-06-01 · CWE 1.13

updated Common_Consequences

Modification: CWE Content Team · MITRE · 2011-06-27 · CWE 2.0

updated Common_Consequences

Modification: CWE Content Team · MITRE · 2012-05-11 · CWE 2.2

updated Relationships

Modification: CWE Content Team · MITRE · 2012-10-30 · CWE 2.3

updated Potential_Mitigations

Modification: CWE Content Team · MITRE · 2013-02-21 · CWE 2.4

updated Applicable_Platforms, Potential_Mitigations, References, Time_of_Introduction

Modification: CWE Content Team · MITRE · 2017-11-08 · CWE 3.0

updated References

Modification: CWE Content Team · MITRE · 2020-02-24 · CWE 4.0

updated Applicable_Platforms, Relationships

Modification: CWE Content Team · MITRE · 2023-01-31 · CWE 4.10

updated Description, Potential_Mitigations

Modification: CWE Content Team · MITRE · 2023-04-27 · CWE 4.11

updated References, Relationships

Modification: CWE Content Team · MITRE · 2023-06-29 · CWE 4.12

updated Mapping_Notes

Modification: CWE Content Team · MITRE · 2024-07-16 · CWE 4.15

updated References

Modification: CWE Content Team · MITRE · 2025-12-11 · CWE 4.19

updated Detection_Factors, Potential_Mitigations, Relationship_Notes, Weakness_Ordinalities

Modification: CWE Content Team · MITRE · 2026-10-28 · CWE 5.0

updated Common_Consequences, Description, Modes_of_Introduction

1 vulnerability references this CWE, most recent first.

GHSA-WR66-4WC3-FRFH

Vulnerability from github – Published: 2024-02-18 03:30 – Updated: 2024-08-01 15:31
VLAI
Details

Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.

Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Show details on source website
To clipboard 

{
  "affected": [],
  "aliases": [
    "CVE-2023-52360"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-511"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-02-18T03:15:08Z",
    "severity": "HIGH"
  },
  "details": "Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.",
  "id": "GHSA-wr66-4wc3-frfh",
  "modified": "2024-08-01T15:31:26Z",
  "published": "2024-02-18T03:30:24Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52360"
    },
    {
      "type": "WEB",
      "url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"
    },
    {
      "type": "WEB",
      "url": "https://https://consumer.huawei.com/en/support/bulletin/2024/2"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}
Mitigation
Installation

Always verify the integrity of the product that is being installed.

No CAPEC attack patterns related to this CWE.

← Back to the CWE list