CAPEC-703 View Detail

CAPEC-703

Industrial Control System (ICS) Patterns
Draft
Explicit
2023-01-24
00h00 +00:00
CAPEC Mitre.org
Alerte pour un CAPEC
Stay informed of any changes for a specific CAPEC.
Notifications manage

Name: Industrial Control System (ICS) Patterns

This view contains a listing of CAPECs that apply to industrial control systems (ICS). Some children of these attack patterns might also be applicable.

CAPEC Members

CAPEC-1: Accessing Functionality Not Properly Constrained by ACLs Base

CAPEC-57: Utilizing REST's Trust in the System Resource to Obtain Sensitive Data Base

CAPEC-65: Sniff Application Code Base

CAPEC-70: Try Common or Default Usernames and Passwords Base

CAPEC-94: Adversary in the Middle (AiTM) Base

CAPEC-98: Phishing Base

CAPEC-125: Flooding Base

CAPEC-130: Excessive Allocation Base

CAPEC-131: Resource Leak Exposure Base

CAPEC-141: Cache Poisoning Base

CAPEC-148: Content Spoofing Base

CAPEC-158: Sniffing Network Traffic Base

CAPEC-163: Spear Phishing Base

CAPEC-165: File Manipulation Base

CAPEC-169: Footprinting Base

CAPEC-177: Create files with the same name as files protected with a higher classification Base

CAPEC-180: Exploiting Incorrectly Configured Access Control Security Levels Base

CAPEC-184: Software Integrity Attack Base

CAPEC-191: Read Sensitive Constants Within an Executable Base

CAPEC-227: Sustained Client Engagement Base

CAPEC-268: Audit Log Manipulation Base

CAPEC-292: Host Discovery Base

CAPEC-309: Network Topology Mapping Base

CAPEC-312: Active OS Fingerprinting Base

CAPEC-313: Passive OS Fingerprinting Base

CAPEC-438: Modification During Manufacture Base

CAPEC-439: Manipulation During Distribution Base

CAPEC-441: Malicious Logic Insertion Base

CAPEC-457: USB Memory Attacks Base

CAPEC-473: Signature Spoof Base

CAPEC-504: Task Impersonation Base

CAPEC-540: Overread Buffers Base

CAPEC-547: Physical Destruction of Device or Component Base

CAPEC-552: Install Rootkit Base

CAPEC-555: Remote Services with Stolen Credentials Base

CAPEC-560: Use of Known Domain Credentials Base

CAPEC-573: Process Footprinting Base

CAPEC-580: System Footprinting Base

CAPEC-603: Blockage Base

CAPEC-607: Obstruction Base

CAPEC-635: Alternative Execution Due to Deceptive Filenames Base

CAPEC-648: Collect Data from Screen Capture Base

CAPEC-649: Adding a Space to a File Extension Base

CAPEC-690: Metadata Spoofing Base

CAPEC-691: Spoof Open-Source Software Metadata Base

CAPEC-692: Spoof Version Control System Commit Metadata Base

CAPEC Informations

Notes

This view was created in part by utilizing the ATT&CK ICS Matrix [REF-752].

Submission

Name Organization Date Date release
CAPEC Content Team The MITRE Corporation 2023-01-24 +00:00

References

REF-752

ATT&CK ICS
https://attack.mitre.org/matrices/ics/
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.