COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-296

ICMP Information Request

An adversary sends an ICMP Information Request to a host to determine if it will respond to this deprecated mechanism. ICMP Information Requests are a deprecated message type. Information Requests were originally used for diskless machines to automatically obtain their network configuration, but this message type has been superseded by more robust protocol implementations like DHCP.

Abstraction

Detailed

Typical severity

Low

Likelihood of attack

Medium

Understand the attack

What is this attack pattern?

An adversary sends an ICMP Information Request to a host to determine if it will respond to this deprecated mechanism. ICMP Information Requests are a deprecated message type. Information Requests were originally used for diskless machines to automatically obtain their network configuration, but this message type has been superseded by more robust protocol implementations like DHCP.

Requirements

What does the attack require?

Prerequisites

  • The ability to send an ICMP Type 15 Information Request and receive an ICMP Type 16 Information Reply in response.

Skills required

  • Low: The adversary needs to know certain linux commands for this type of attack.

Resources required

  • Scanners or utilities that provide the ability to send custom ICMP queries.

Impact

What does a successful attack lead to?

Other

Affected scopes: Confidentiality

CAPEC-296: ICMP Information Request — DayBreach Saldırı Sözlüğü · DayBreach