CAPECattack pattern
CAPEC-623 Compromising Emanations Attack
Low
Official page ↗
- Abstraction
- Detailed
- Status
- Draft
- Typical severity
- Low
- CAPEC version
- 3.9
Description
Compromising Emanations (CE) are defined as unintentional signals which an attacker may intercept and analyze to disclose the information processed by the targeted equipment. Commercial mobile devices and retransmission devices have displays, buttons, microchips, and radios that emit mechanical emissions in the form of sound or vibrations. Capturing these emissions can help an adversary understand what the device is doing.
Prerequisites
• Proximal access to the device.
Skills required
• [High] Sophisticated attack.
Consequences
• Confidentiality: Read Data
Mitigations
• None are known.
Related
Child of · CAPEC (1)
- CAPEC-189 Black Box Reverse Engineering attack pattern
Weakness · CWE (1)
- CWE-201 Insertion of Sensitive Information Into Sent Data weakness
Referenced by CWE · attack pattern (1)
- CWE-201 Insertion of Sensitive Information Into Sent Data weakness