CAPEC Definitions
CAPEC Definitions / CAPEC-478
CAPEC-478: Modification of Windows Service Configuration
An adversary exploits a weakness in access control to modify the execution parameters of a Windows service. The goal of this attack is to execute a malicious binary in place of an existing service.
Severity:High
Possibility:Low
Extended Description
No Extended Description.
Mitigations
Ensure proper permissions are set for Registry hives to prevent users from modifying keys for system components that may lead to privilege escalation.
Relationships with other CAPECs
CAPEC-203: Manipulate Registry Information
Prerequisites
The adversary must have the capability to write to the Windows Registry on the targeted system.
Related Weaknesses
CWE-284: Improper Access Control
