MITRE ATT&CKsub-technique

T1499.004 Application or System Exploitation

Published 2020-02-20 Modified 2025-10-24 Official page ↗
Domain
enterprise
Tactics
Impact
Platforms
Windows, IaaS, Linux, macOS
Version
1.3
Created
2020-02-20

Description

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users. Some systems may automatically restart critical applications and services when crashes occur, but they can likely be re-exploited to cause a persistent denial of service (DoS) condition. Adversaries may exploit known or zero-day vulnerabilities to crash applications and/or systems, which may also lead to dependent applications and/or systems to be in a DoS condition. Crashed or restarted applications or systems may also have other effects such as Data Destruction, Firmware Corruption, Service Stop etc. which may further cause a DoS condition and deny availability to critical information, applications and/or systems.

Related

Subtechnique of · MITRE ATT&CK (1)

  • T1499 Endpoint Denial of Service technique

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · mitigates (1)

  • M1037 Filter Network Traffic mitigation

Referenced by MITRE ATT&CK · uses (1)

  • S0604 Industroyer software (malware)

Referenced by CAPEC · att&ck technique (1)

  • CAPEC-25 Forced Deadlock attack pattern

Referenced by Compliance · mitigates (10)

  • CIS-13.10 Perform Application Layer Filtering CIS Safeguard v8.1
  • NIST-AC-3 Access Enforcement NIST 800-53 control
  • NIST-AC-4 Information Flow Enforcement NIST 800-53 control
  • NIST-CA-7 Continuous Monitoring NIST 800-53 control
  • NIST-CM-6 Configuration Settings NIST 800-53 control
  • NIST-CM-7 Least Functionality NIST 800-53 control
  • NIST-SC-7 Boundary Protection NIST 800-53 control
  • NIST-SI-10 Information Input Validation NIST 800-53 control
  • NIST-SI-15 Information Output Filtering NIST 800-53 control
  • NIST-SI-4 System Monitoring NIST 800-53 control

References