CAPEC Definitions
CAPEC Definitions / CAPEC-536
CAPEC-536: Data Injected During Configuration
An attacker with access to data files and processes on a victim's system injects malicious data into critical operational data during configuration or recalibration, causing the victim's system to perform in a suboptimal manner that benefits the adversary.
Severity:High
Possibility:Low
Extended Description
No Extended Description.
Mitigations
Ensure that proper access control is implemented on all systems to prevent unauthorized access to system files and processes.
Relationships with other CAPECs
CAPEC-176: Configuration/Environment Manipulation
Prerequisites
The attacker must have previously compromised the victim's systems or have physical access to the victim's systems.
Advanced knowledge of software and hardware capabilities of a manufacturer's product.
Related Weaknesses
CWE-284: Improper Access Control
