| 名称 |
Inter-component Protocol Manipulation |
|
| 攻击可能性 |
典型严重性 |
| High |
Very High |
|
| 摘要 |
Inter-component protocols are used to communicate between different software and hardware modules within a single computer. Common examples are: interrupt signals and data pipes. Subverting the protocol can allow an adversary to impersonate others, discover sensitive information, control the outcome of a session, or perform other attacks. This type of attack targets invalid assumptions that may be inherent in implementers of the protocol, incorrect implementations of the protocol, or vulnerabilities in the protocol itself. |
| 前置条件 |
|
| 解决方案 | |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-707 |
Improper Neutralization |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-272 |
An adversary subverts a communications protocol to perform an attack. This type of attack can allow an adversary to impersonate others, discover sensitive information, control the outcome of a session, or perform other attacks. This type of attack targets invalid assumptions that may be inherent in implementers of the protocol, incorrect implementations of the protocol, or vulnerabilities in the protocol itself. |
|