COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-531

Hardware Component Substitution

An attacker substitutes out a tested and approved hardware component for a maliciously-altered hardware component. This type of attack is carried out directly on the system, enabling the attacker to then cause disruption or additional compromise.

Soyutlama

Detailed

Tipik ciddiyet

High

Saldırı ihtimali

Low

Saldırıyı anla

Bu saldırı kalıbı nedir?

An attacker substitutes out a tested and approved hardware component for a maliciously-altered hardware component. This type of attack is carried out directly on the system, enabling the attacker to then cause disruption or additional compromise.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • Physical access to the system or the integration facility where hardware components are kept.

Gerekli beceri

  • High: Able to develop and manufacture malicious system components that perform the same functions and processes as their non-malicious counterparts.

Gerekli kaynak

MITRE kaydında belirtilmemiş.

Gerçek dünya

MITRE örnek olayları

Örnek olay 1Detay
An attacker has access to an organization's warehouse of card readers being included as a part of an overall security system. By replacing a critical hardware component in the card reader, the attacker is able to alter the function of the card reader to allow an attacker-supplied card to bypass a security checkpoint. The card reader is placed in the warehouse, and later used in the victim's security system. The attacker is then able to go to the victim and use their own card and bypass a physical security checkpoint and gain access to the victim's location for further malicious activity.
CAPEC-531: Hardware Component Substitution — DayBreach Saldırı Sözlüğü · DayBreach