CAPEC-536

Standard Abstraction Level
Meta — Very abstract, high-level category
Standard — Specific enough to understand
Detailed — Tied to specific technique Stable MITRE CAPEC Status
Stable — Fully reviewed and complete
Draft — Under development
Incomplete — Partially defined
Deprecated — No longer recommended
Obsolete — Replaced by another CAPEC Likelihood: Low Severity: High
Data Injected During Configuration

Description

An attacker with access to data files and processes on a victim's system injects malicious data into critical operational data during configuration or recalibration, causing the victim's system to perform in a suboptimal manner that benefits the adversary.

Prerequisites

The attacker must have previously compromised the victim's systems or have physical access to the victim's systems.

Advanced knowledge of software and hardware capabilities of a manufacturer's product.

Mitigations

Ensure that proper access control is implemented on all systems to prevent unauthorized access to system files and processes.

Skills Required

[High] Ability to generate and inject false data into operational data into a system with the intent of causing the victim to alter the configuration of the system.