Dark Mode

Settings

Capec-216 Detail

Communication Channel Manipulation

Meta Communications

Children: 12 217

Threats: T106 T109 T272 T276 T296 T395

Description

An adversary manipulates a setting or parameter on communications channel in order to compromise its security. This can result in information exposure, insertion/removal of information from the communications stream, and/or potentially system compromise.

Not present

External ID Source Link Description
CAPEC-216 capec https://capec.mitre.org/data/definitions/216.html
CWE-306 cwe http://cwe.mitre.org/data/definitions/306.html

Not present

  1. The target application must leverage an open communications channel.
  2. The channel on which the target communicates must be vulnerable to interception (e.g., adversary in the middle attack - CAPEC-94).
  1. A tool that is capable of viewing network traffic and generating custom inputs to be used in the attack.

Not present

Integrity Confidentiality
Read Data (The adversary's injection of additional content into a communication channel negatively impacts the integrity of that channel.) Read Data (A successful Communication Channel Manipulation attack can result in sensitive information exposure to the adversary, thereby compromising the communication channel's confidentiality.)
Modify Data (The adversary's injection of additional content into a communication channel negatively impacts the integrity of that channel.)
Other (The adversary's injection of additional content into a communication channel negatively impacts the integrity of that channel.)

Not present