CAPEC Definitions / CAPEC-456
CAPEC-456: Infected Memory
An adversary inserts malicious logic into memory enabling them to achieve a negative impact. This logic is often hidden from the user of the system and works behind the scenes to achieve negative impacts. This pattern of attack focuses on systems already fielded and used in operation as opposed to systems that are still under development and part of the supply chain.
Extended Description
No Extended Description.
Mitigations
Leverage anti-virus products to detect stop operations with known virus.
Relationships with other CAPECs
CAPEC-441: Malicious Logic Insertion
Prerequisites
No prerequisites found.
Related Weaknesses
CWE-1257: Improper Access Control Applied to Mirrored or Aliased Memory Regions
CWE-1260: Improper Handling of Overlap Between Protected Memory Ranges
CWE-1274: Improper Access Control for Volatile Memory Containing Boot Code
CWE-1312: Missing Protection for Mirrored Regions in On-Chip Fabric Firewall
CWE-1316: Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges
