CAPEC-456: Infected Memory
Description
An adversary inserts malicious logic into memory enabling them to achieve a negative impact. This logic is often hidden from the user of the system and works behind the scenes to achieve negative impacts. This pattern of attack focuses on systems already fielded and used in operation as opposed to systems that are still under development and part of the supply chain.
- Likelihood of attack
- Medium
- Typical severity
- High
- Abstraction
- StandardA specific methodology or technique used in an attack.
Mechanism of attack: Manipulate System Resources
Consequences
- Authorization
Execute Unauthorized Commands
Mitigations
- Leverage anti-virus products to detect stop operations with known virus.
Related weaknesses (CWE)
- CWE-1257Improper Access Control Applied to Mirrored or Aliased Memory Regions
- CWE-1260Improper Handling of Overlap Between Protected Memory Ranges
- CWE-1274Improper Access Control for Volatile Memory Containing Boot Code
- CWE-1312Missing Protection for Mirrored Regions in On-Chip Fabric Firewall
- CWE-1316Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges