This vulnerability occurs when a device or system has areas meant to be physically secure, but the safeguards in place are too weak to stop someone with direct physical access from reaching restricted components or data.
Physical security flaws happen when the locks, seals, enclosures, or tamper-proofing on a device are not strong enough for its intended use. A consumer router, a medical implant, and an industrial control panel all need different levels of protection. Choosing the right physical barrier—like a robust casing or tamper-evident seals—is the first critical step in the design process. However, selecting a good mechanism isn't enough; it must be correctly implemented during manufacturing and assembly. A weak point, such as a poorly installed screw or an easily bypassed panel, can render the entire protection scheme useless. Ultimately, physical security fails when the design, implementation, and production do not work together to create a unified defense against hands-on tampering.
Impact: Varies by Context