Standard attack pattern
Draft
CAPEC-669: Alteration of a Software Update
An adversary with access to an organization’s software update infrastructure inserts malware into the content of an outgoing update to fielded systems where a wide range of malicious effects are possible. With the same level of access, the adversary can alter a software update to perform specific malicious acts including granting the adversary control over the software’s normal functionality.
High
Typical severity
Per MITRE
Medium
Likelihood of attack
Per MITRE
0
Related weaknesses
CWEs this targets
Standard
Abstraction
MITRE classification
Overview
CAPEC-669 (Alteration of a Software Update) is a standard-level attack pattern catalogued by MITRE in the Common Attack Pattern Enumeration and Classification (CAPEC). It describes a recurring method attackers use to exploit software weaknesses.