CAPECattack pattern

CAPEC-620 Drop Encryption Level

High Official page ↗
Abstraction
Standard
Status
Draft
Typical severity
High
CAPEC version
3.9

Description

An attacker forces the encryption level to be lowered, thus enabling a successful attack against the encrypted data.

Consequences

• Access Control: Bypass Protection Mechanism

Related

Att&ck technique · MITRE ATT&CK (1)

  • T1600 Weaken Encryption technique

Child of · CAPEC (1)

  • CAPEC-212 Functionality Misuse attack pattern

Weakness · CWE (1)

  • CWE-757 Selection of Less-Secure Algorithm During Negotiation weakness

Referenced by CAPEC · child of (1)

  • CAPEC-606 Weakening of Cellular Encryption attack pattern

Referenced by CWE · attack pattern (1)

  • CWE-757 Selection of Less-Secure Algorithm During Negotiation weakness