CAPECattack pattern

CAPEC-440 Hardware Integrity Attack

High Official page ↗
Abstraction
Meta
Status
Stable
Likelihood of attack
Low
Typical severity
High
CAPEC version
3.9

Description

An adversary exploits a weakness in the system maintenance process and causes a change to be made to a technology, product, component, or sub-component or a new one installed during its deployed use at the victim location for the purpose of carrying out an attack.

Prerequisites

• Influence over the deployed system at a victim location.

Consequences

• Integrity: Execute Unauthorized Commands

Related

Att&ck technique · MITRE ATT&CK (2)

  • T1195.003 Compromise Hardware Supply Chain sub-technique
  • T1200 Hardware Additions technique

Referenced by CAPEC · child of (2)

  • CAPEC-401 Physically Hacking Hardware attack pattern
  • CAPEC-534 Malicious Hardware Update attack pattern