CAPEC 679 Exploitation of Improperly Configured or Implemented Memory Protections

Name: VulnX Platform
Author: Studio Consi

Draft Detailed Medium Risk

Severity Very High

Description

{'xhtml:p': 'An adversary takes advantage of missing or incorrectly configured access control within memory to read/write data or inject malicious code into said memory.'}

CAPEC 679 Exploitation of Improperly Configured or Implemented Memory Protections

Description

Mitigations

Ensure Immutable Code Or Data Is Programmed Into Rom Or Write-Once Memory.

Ensure That Original And Mirrored Memory Regions Apply The Same Protections.

Ensure That Protected And Unprotected Memory Ranges Are Isolated And Do Not Overlap.

If Memory Regions Must Overlap, Leverage Memory Priority Schemes If Memory Regions Can Overlap.

Consequences

Security Scopes Affected

Potential Impacts

Relationships

Parent CAPECs

CAPEC 679 Exploitation of Improperly Configured or Implemented Memory Protections

Description

Mitigations

Ensure Immutable Code Or Data Is Programmed Into Rom Or Write-Once Memory.

Ensure That Original And Mirrored Memory Regions Apply The Same Protections.

Ensure That Protected And Unprotected Memory Ranges Are Isolated And Do Not Overlap.

If Memory Regions Must Overlap, Leverage Memory Priority Schemes If Memory Regions Can Overlap.

Consequences

Security Scopes Affected

Potential Impacts

Relationships

Parent CAPECs

Iscriviti alla newsletter