CAPEC Definitions
CAPEC Definitions / CAPEC-549
CAPEC-549: Local Execution of Code
An adversary installs and executes malicious code on the target system in an effort to achieve a negative technical impact. Examples include rootkits, ransomware, spyware, adware, and others.
Severity:High
Possibility:Medium
Extended Description
No Extended Description.
Mitigations
Employ robust cybersecurity training for all employees.
Implement system antivirus software that scans all attachments before opening them.
Regularly patch all software.
Execute all suspicious files in a sandbox environment.
Relationships with other CAPECs
No related CAPECs found.
Prerequisites
Knowledge of the target system's vulnerabilities that can be capitalized on with malicious code.The adversary must be able to place the malicious code on the target system.
Related Weaknesses
CWE-829: Inclusion of Functionality from Untrusted Control Sphere
