CWE-1100 — Vulnerability Class 2

CWE-1100 represents a structural weakness where system-dependent functionalities are not isolated into separate, standalone modules, leading to tightly coupled codebases. This lack of separation typically allows attackers to exploit the application by manipulating shared state or leveraging side effects from unrelated system calls, potentially bypassing security controls or causing unintended behavior across different application layers. When critical system interactions are embedded directly within business logic, the attack surface expands significantly, as vulnerabilities in one area can easily compromise the entire system. Developers can avoid this weakness by adhering to modular design principles, ensuring that all platform-specific or hardware-dependent operations are encapsulated within dedicated interfaces. This separation enhances maintainability, simplifies testing, and limits the blast radius of potential exploits by containing system-specific risks within well-defined boundaries.