CAPEC-517: Documentation Alteration to Circumvent Dial-down

Description

An attacker with access to a manufacturer's documentation, which include descriptions of advanced technology and/or specific components' criticality, alters the documents to circumvent dial-down functionality requirements. This alteration would change the interpretation of implementation and manufacturing techniques, allowing for advanced technologies to remain in place even though these technologies might be restricted to certain customers, such as nations on the terrorist watch list, giving the attacker on the receiving end of a shipped product access to an advanced technology that might otherwise be restricted.

Extended Description

WS-Addressing is used to virtualize services, provide return addresses and other routing information, however, unless the WS-Addressing headers are protected they are vulnerable to rewriting. Content in a registry is deployed by the service provider. The registry in an SOA or Web Services system can be accessed by the service requester via UDDI or other protocol.

Severity :

High

Possibility :

Low

Type :

Detailed

Relationships with other CAPECs

This table shows the other attack patterns and high level categories that are related to this attack pattern.

CAPEC-447: Design Alteration Design Alteration

Prerequisites

This table shows the other attack patterns and high level categories that are related to this attack pattern.

Advanced knowledge of internal software and hardware components within manufacturer's development environment.
Access to the manufacturer's documentation.

Skills required

This table shows the other attack patterns and high level categories that are related to this attack pattern.

High Ability to read, interpret, and subsequently alter manufacturer's documentation to prevent dial-down capabilities.
High Ability to stealthly gain access via remote compromise or physical access to the manufacturer's documentation.

Taxonomy mappings

Mappings to ATT&CK, OWASP and other frameworks.

Related CWE

A Related Weakness relationship associates a weakness with this attack pattern. Each association implies a weakness that must exist for a given attack to be successful.

Visit http://capec.mitre.org/ for more details.