CAPEC-624: Hardware Fault Injection
Description
Extended Description
Attacks of this kind often target management services over commonly used ports such as SSH, FTP, Telnet, LDAP, Kerberos, MySQL, and more. Additional targets include Single Sign-On (SSO) or cloud-based applications/services that utilize federated authentication protocols, and externally facing applications.
The primary goal of Credential Stuffing is to achieve lateral movement and gain authenticated access to additional systems, applications, and/or services. A successfully executed Credential Stuffing attack could result in the adversary impersonating the victim or executing any action that the victim is authorized to perform.
Although not technically a brute force attack, Credential Stuffing attacks can function as such if an adversary possess multiple known passwords for the same user account. This may occur in the event where an adversary obtains user credentials from multiple sources or if the adversary obtains a user's password history for an account.
Credential Stuffing attacks are similar to Password Spraying attacks (CAPEC-565) regarding their targets and their overall goals. However, Password Spraying attacks do not have any insight into known username/password combinations and instead leverage common or expected passwords. This also means that Password Spraying attacks must avoid inducing account lockouts, which is generally not a worry of Credential Stuffing attacks. Password Spraying attacks may additionally lead to Credential Stuffing attacks, once a successful username/password combination is discovered.
Severity :
High
Possibility :
Low
Type :
Meta
Relationships with other CAPECs
This table shows the other attack patterns and high level categories that are related to this attack pattern.
Prerequisites
This table shows the other attack patterns and high level categories that are related to this attack pattern.
- Physical access to the system
- The adversary must be cognizant of where fault injection vulnerabilities exist in the system in order to leverage them for exploitation.
Skills required
This table shows the other attack patterns and high level categories that are related to this attack pattern.
- High Adversaries require non-trivial technical skills to create and implement fault injection attacks. Although this style of attack has become easier (commercial equipment and training classes are available to perform these attacks), they usual require significant setup and experimentation time during which physical access to the device is required.
Taxonomy mappings
Mappings to ATT&CK, OWASP and other frameworks.
Resources required
Related CWE
A Related Weakness relationship associates a weakness with this attack pattern. Each association implies a weakness that must exist for a given attack to be successful.
CWE-1247: Improper Protection Against Voltage and Clock Glitches
CWE-1248: Semiconductor Defects in Hardware Logic with Security-Sensitive Implications
CWE-1256: Improper Restriction of Software Interfaces to Hardware Features
CWE-1319: Improper Protection against Electromagnetic Fault Injection (EM-FI)
CWE-1332: Improper Handling of Faults that Lead to Instruction Skips
CWE-1334: Unauthorized Error Injection Can Degrade Hardware Redundancy
CWE-1338: Improper Protections Against Hardware Overheating
CWE-1351: Improper Handling of Hardware Behavior in Exceptionally Cold Environments
Visit http://capec.mitre.org/ for more details.