CAPECattack pattern

CAPEC-623 Compromising Emanations Attack

Low Official page ↗
Abstraction
Detailed
Status
Draft
Typical severity
Low
CAPEC version
3.9

Description

Compromising Emanations (CE) are defined as unintentional signals which an attacker may intercept and analyze to disclose the information processed by the targeted equipment. Commercial mobile devices and retransmission devices have displays, buttons, microchips, and radios that emit mechanical emissions in the form of sound or vibrations. Capturing these emissions can help an adversary understand what the device is doing.

Prerequisites

• Proximal access to the device.

Skills required

• [High] Sophisticated attack.

Consequences

• Confidentiality: Read Data

Mitigations

• None are known.

Related

Child of · CAPEC (1)

  • CAPEC-189 Black Box Reverse Engineering attack pattern

Weakness · CWE (1)

  • CWE-201 Insertion of Sensitive Information Into Sent Data weakness

Referenced by CWE · attack pattern (1)

  • CWE-201 Insertion of Sensitive Information Into Sent Data weakness