CWE-509: Replicating Malicious Code (Virus or Worm)

CWE-509 (Replicating Malicious Code (Virus or Worm)) is a software weakness identified by MITRE's Common Weakness Enumeration. It is classified as a Base-level weakness. Replicating malicious code, including viruses and worms, will attempt to attack other systems once it has successfully compromised the target system or the product.

Attackers can exploit CWE-509 (Replicating Malicious Code (Virus or Worm)) to execute unauthorized code or commands. This weakness is typically introduced during the Implementation, Operation phase of software development.

Key mitigations include: Antivirus software scans for viruses or worms.

CWE-509 is classified as a Base-level weakness (Medium abstraction). Its actual severity depends on the specific context and how the weakness manifests in your application.