CAPEC-700: Network Boundary Bridging

Description

An adversary which has gained elevated access to network boundary devices may use these devices to create a channel to bridge trusted and untrusted networks. Boundary devices do not necessarily have to be on the network’s edge, but rather must serve to segment portions of the target network the adversary wishes to cross into.

Extended Description

Network boundary devices are network devices such as routers and firewalls which segment networks by restricting certain types of traffic from flowing through the device. Network boundary devices are often directly accessible through a portal page for management purposes. An adversary’s goal when conducting network boundary bridging is to connect networks which are being segmented by the device. To do so, the adversary must first compromise the network boundary device.

Severity :

High

Possibility :

Medium

Type :

Standard

Relationships with other CAPECs

This table shows the other attack patterns and high level categories that are related to this attack pattern.

CAPEC-70: Try Common or Default Usernames and Passwords Try Common or Default Usernames and Passwords CAPEC-161: Infrastructure Manipulation Infrastructure Manipulation CAPEC-560: Use of Known Domain Credentials Use of Known Domain Credentials

Prerequisites

This table shows the other attack patterns and high level categories that are related to this attack pattern.

The adversary must have control of a network boundary device.

Skills required

This table shows the other attack patterns and high level categories that are related to this attack pattern.

Medium The adversary must understand how to manage the target network device to create or edit policies which will bridge networks.

Taxonomy mappings

Mappings to ATT&CK, OWASP and other frameworks.

ATTACK | Network Boundary Bridging

Resources required

The adversary requires either high privileges or full control of a boundary device on a target network.

Related CWE

A Related Weakness relationship associates a weakness with this attack pattern. Each association implies a weakness that must exist for a given attack to be successful.

Visit http://capec.mitre.org/ for more details.