CAPECattack pattern
CAPEC-439 Manipulation During Distribution
- Abstraction
- Meta
- Status
- Draft
- CAPEC version
- 3.9
Description
An attacker undermines the integrity of a product, software, or technology at some stage of the distribution channel. The core threat of modification or manipulation during distribution arise from the many stages of distribution, as a product may traverse multiple suppliers and integrators as the final asset is delivered. Components and services provided from a manufacturer to a supplier may be tampered with during integration or packaging.
Related
Att&ck technique · MITRE ATT&CK (1)
- T1195 Supply Chain Compromise technique
Weakness · CWE (1)
- CWE-1269 Product Released in Non-Release Configuration weakness
Referenced by CAPEC · child of (3)
Referenced by CWE · attack pattern (1)
- CWE-1269 Product Released in Non-Release Configuration weakness