CAPEC-296: ICMP Information Request
Description
An adversary sends an ICMP Information Request to a host to determine if it will respond to this deprecated mechanism. ICMP Information Requests are a deprecated message type. Information Requests were originally used for diskless machines to automatically obtain their network configuration, but this message type has been superseded by more robust protocol implementations like DHCP.
- Likelihood of attack
- Not rated by MITRE
- Typical severity
- Low
- Abstraction
- DetailedA low-level, detailed pattern, often for a particular technology.
Mechanism of attack: Collect and Analyze Information
Prerequisites
- The ability to send an ICMP Type 15 Information Request and receive an ICMP Type 16 Information Reply in response.
Skills required
- LowThe adversary needs to know certain linux commands for this type of attack.
Consequences
- Confidentiality
Other
Mitigations
CAPEC 3.9 lists no mitigation for this pattern; see its child patterns or related weaknesses.