CAPECattack pattern
CAPEC-594 Traffic Injection
- Abstraction
- Meta
- Status
- Stable
- CAPEC version
- 3.9
Description
An adversary injects traffic into the target's network connection. The adversary is therefore able to degrade or disrupt the connection, and potentially modify the content. This is not a flooding attack, as the adversary is not focusing on exhausting resources. Instead, the adversary is crafting a specific input to affect the system in a particular way.
Prerequisites
• The target application must leverage an open communications channel.
• The channel on which the target communicates must be vulnerable to interception (e.g., adversary in the middle attack - CAPEC-94).
Consequences
• Availability: Unreliable Execution
• Integrity: Other
Related
Weakness · CWE (1)
- CWE-940 Improper Verification of Source of a Communication Channel weakness
Referenced by CAPEC · child of (1)
- CAPEC-595 Connection Reset attack pattern
Referenced by CWE · attack pattern (1)
- CWE-940 Improper Verification of Source of a Communication Channel weakness