CAPECattack pattern
CAPEC-531 Hardware Component Substitution
High
Official page ↗
- Abstraction
- Detailed
- Status
- Draft
- Likelihood of attack
- Low
- Typical severity
- High
- CAPEC version
- 3.9
Description
An attacker substitutes out a tested and approved hardware component for a maliciously-altered hardware component. This type of attack is carried out directly on the system, enabling the attacker to then cause disruption or additional compromise.
Prerequisites
• Physical access to the system or the integration facility where hardware components are kept.
Skills required
• [High] Able to develop and manufacture malicious system components that perform the same functions and processes as their non-malicious counterparts.
Related
Att&ck technique · MITRE ATT&CK (1)
- T1195.003 Compromise Hardware Supply Chain sub-technique
Child of · CAPEC (1)
- CAPEC-534 Malicious Hardware Update attack pattern