CAPECattack pattern
CAPEC-596 TCP RST Injection
- Abstraction
- Detailed
- Status
- Draft
- CAPEC version
- 3.9
Description
An adversary injects one or more TCP RST packets to a target after the target has made a HTTP GET request. The goal of this attack is to have the target and/or destination web server terminate the TCP connection.
Prerequisites
• An On/In Path Device
Related
Child of · CAPEC (1)
- CAPEC-595 Connection Reset attack pattern
Weakness · CWE (1)
- CWE-940 Improper Verification of Source of a Communication Channel weakness
Referenced by CWE · attack pattern (1)
- CWE-940 Improper Verification of Source of a Communication Channel weakness