廠商與產品

CPE（通用平台枚舉）是一種用於命名硬體、軟體和作業系統的標準化方案。CPE 提供結構化命名方式，可根據廠商、產品名稱、版本、更新、版次和語言等特定屬性，唯一識別和分類資訊技術系統、平台和套件。

CAPEC 描述

In this attack scenario, the attacker imitates a cellular base station with their own "rogue" base station equipment. Since cellular devices connect to whatever station has the strongest signal, the attacker can easily convince a targeted cellular device (e.g. the retransmission device) to talk to the rogue base station.

CAPEC 資訊

前置條件

None

所需技能

This technique has been demonstrated by amateur hackers and commercial tools and open source projects are available to automate the attack.

緩解措施

Passively monitor cellular network connection for real-time threat detection and logging for manual review.

提交

名稱	機構	日期	發布日期
CAPEC Content Team	The MITRE Corporation	2015-11-09 +00:00

修改記錄

名稱	機構	日期	備註
CAPEC Content Team	The MITRE Corporation	2018-07-31 +00:00	Updated Attack_Motivation-Consequences
CAPEC Content Team	The MITRE Corporation	2019-09-30 +00:00	Updated Description, Related_Attack_Patterns
CAPEC Content Team	The MITRE Corporation	2020-07-30 +00:00	Updated Description
CAPEC Content Team	The MITRE Corporation	2022-09-29 +00:00	Updated Related_Attack_Patterns

CAPEC-617 詳細資料

CAPEC-617