CAPECattack pattern

CAPEC-439 Manipulation During Distribution

Official page ↗
Abstraction
Meta
Status
Draft
CAPEC version
3.9

Description

An attacker undermines the integrity of a product, software, or technology at some stage of the distribution channel. The core threat of modification or manipulation during distribution arise from the many stages of distribution, as a product may traverse multiple suppliers and integrators as the final asset is delivered. Components and services provided from a manufacturer to a supplier may be tampered with during integration or packaging.

Related

Att&ck technique · MITRE ATT&CK (1)

  • T1195 Supply Chain Compromise technique

Weakness · CWE (1)

  • CWE-1269 Product Released in Non-Release Configuration weakness

Referenced by CAPEC · child of (3)

  • CAPEC-522 Malicious Hardware Component Replacement attack pattern
  • CAPEC-523 Malicious Software Implanted attack pattern
  • CAPEC-524 Rogue Integration Procedures attack pattern

Referenced by CWE · attack pattern (1)

  • CWE-1269 Product Released in Non-Release Configuration weakness