Umbra Wiki attack-pattern attack-pattern/CAPEC-401
Back to wiki

CAPEC-401 — Physically Hacking Hardware

provenance: imported · CWE: CWE-1263

CAPEC-401: Physically Hacking Hardware

MITRE CAPEC attack pattern

Status Stable
Typical severity High
Likelihood of attack Low
Catalogue CAPEC 3.9 (2023-01-24)

Description

An adversary exploits a weakness in access control to gain access to currently installed hardware and precedes to implement changes or secretly replace a hardware component which undermines the system's integrity for the purpose of carrying out an attack.

Where this sits in the chain

A finding maps to a weakness (CWE), a weakness is exploited by an attack pattern (CAPEC), and an attack pattern shows up in ATT&CK as observed adversary behaviour. This page is the middle hop.

Weaknesses exploited: CWE-1263

Source