CAPEC-398: Magnetic Strip Card Brute Force Attacks

Description

An adversary analyzes the data on two or more magnetic strip cards and is able to generate new cards containing valid sequences that allow unauthorized access and/or impersonation of individuals.

Likelihood of attack: Not rated by MITRE
Typical severity: Not rated by MITRE
Abstraction: DetailedA low-level, detailed pattern, often for a particular technology.

Mechanism of attack: Subvert Access Control

Prerequisites

The ability to calculate a card checksum and write out a valid checksum value. Some cards are protected by a checksum calculation, therefore it is necessary to determine what algorithm is being used to calculate the checksum and to employ that algorithm to calculate and write a new valid checksum for the card being created.

Mitigations

CAPEC 3.9 lists no mitigation for this pattern; see its child patterns or related weaknesses.

Related weaknesses (CWE)

CAPEC 3.9 links no CWE weakness to this pattern.

Related attack patterns

Parent

CAPEC-395Bypassing Electronic Locks and Access ControlsStandard

Prerequisites

The ability to calculate a card checksum and write out a valid checksum value. Some cards are protected by a checksum calculation, therefore it is necessary to determine what algorithm is being used to calculate the checksum and to employ that algorithm to calculate and write a new valid checksum for the card being created.