CAPEC-521: Hardware Design Specifications Are Altered

Description
An attacker with access to a manufacturer's hardware manufacturing process documentation alters the design specifications, which introduces flaws advantageous to the attacker once the system is deployed.
Extended Description

WS-Addressing is used to virtualize services, provide return addresses and other routing information, however, unless the WS-Addressing headers are protected they are vulnerable to rewriting. Content in a registry is deployed by the service provider. The registry in an SOA or Web Services system can be accessed by the service requester via UDDI or other protocol.

Severity :

High

Possibility :

Low

Type :

Detailed
Relationships with other CAPECs

This table shows the other attack patterns and high level categories that are related to this attack pattern.

CAPEC-447: Design Alteration Design Alteration
Prerequisites

This table shows the other attack patterns and high level categories that are related to this attack pattern.

  • Advanced knowledge of hardware capabilities of a manufacturer's product.
  • Access to the manufacturer's documentation.
Skills required

This table shows the other attack patterns and high level categories that are related to this attack pattern.

  • High Ability to read, interpret, and subsequently alter manufacturer's documentation to cause errors in design specifications.
  • High Ability to stealthly gain access via remote compromise or physical access to the manufacturer's documentation.
Taxonomy mappings

Mappings to ATT&CK, OWASP and other frameworks.

Related CWE

A Related Weakness relationship associates a weakness with this attack pattern. Each association implies a weakness that must exist for a given attack to be successful.

Visit http://capec.mitre.org/ for more details.