CAPECattack pattern

CAPEC-456 Infected Memory

High Official page ↗
Abstraction
Standard
Status
Stable
Likelihood of attack
Medium
Typical severity
High
CAPEC version
3.9

Description

An adversary inserts malicious logic into memory enabling them to achieve a negative impact. This logic is often hidden from the user of the system and works behind the scenes to achieve negative impacts. This pattern of attack focuses on systems already fielded and used in operation as opposed to systems that are still under development and part of the supply chain.

Consequences

• Authorization: Execute Unauthorized Commands

Mitigations

• Leverage anti-virus products to detect stop operations with known virus.

Related

Child of · CAPEC (1)

  • CAPEC-441 Malicious Logic Insertion attack pattern

Weakness · CWE (5)

  • CWE-1257 Improper Access Control Applied to Mirrored or Aliased Memory Regions weakness
  • CWE-1260 Improper Handling of Overlap Between Protected Memory Ranges weakness
  • CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code weakness
  • CWE-1312 Missing Protection for Mirrored Regions in On-Chip Fabric Firewall weakness
  • CWE-1316 Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges weakness

Referenced by CAPEC · child of (2)

  • CAPEC-457 USB Memory Attacks attack pattern
  • CAPEC-458 Flash Memory Attacks attack pattern

Referenced by CWE · attack pattern (5)

  • CWE-1257 Improper Access Control Applied to Mirrored or Aliased Memory Regions weakness
  • CWE-1260 Improper Handling of Overlap Between Protected Memory Ranges weakness
  • CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code weakness
  • CWE-1312 Missing Protection for Mirrored Regions in On-Chip Fabric Firewall weakness
  • CWE-1316 Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges weakness