CAPECattack pattern

CAPEC-184 Software Integrity Attack

Low Official page ↗
Abstraction
Meta
Status
Draft
Typical severity
Low
CAPEC version
3.9

Description

An attacker initiates a series of events designed to cause a user, program, server, or device to perform actions which undermine the integrity of software code, device data structures, or device firmware, achieving the modification of the target's integrity to achieve an insecure state.

Skills required

• [Medium] Manual or user-assisted attacks require deceptive mechanisms to trick the user into clicking a link or downloading and installing software. Automated update attacks require the attacker to host a payload and then trigger the installation of the payload code.

Related

Weakness · CWE (1)

  • CWE-494 Download of Code Without Integrity Check weakness

Referenced by CAPEC · can precede (1)

  • CAPEC-691 Spoof Open-Source Software Metadata attack pattern

Referenced by CAPEC · child of (4)

  • CAPEC-185 Malicious Software Download attack pattern
  • CAPEC-186 Malicious Software Update attack pattern
  • CAPEC-663 Exploitation of Transient Instruction Execution attack pattern
  • CAPEC-669 Alteration of a Software Update attack pattern

Referenced by CWE · attack pattern (1)

  • CWE-494 Download of Code Without Integrity Check weakness