Device Domains: Hardware, System Software, Application Software, Networking
[hardware] Hardware
- TID-101 Power Consumption Analysis Side Channel
An embedded-device threat in the Hardware category. Devices will oftentimes consume variable amounts of power depending on the operations the device is performing. Power consumption analysis involves the reading and analyzing of power...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-101-power-consumption-analysis-side-channel
- TID-102 Electromagnetic Analysis Side Channel
An embedded-device threat in the Hardware category. Devices will oftentimes emit different electromagnetic signals during different operations. Electromagnetic analysis involves the collection and analysis of these signals. If devices...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-102-electromagnetic-analysis-side-channel
- TID-103 Microarchitectural Side Channels
An embedded-device threat in the Hardware category. Operating system memory safety models rely on processor hardware to enforce separation between different virtual memory spaces. Failures of processor architectures to properly deliver...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-103-microarchitectural-side-channels
- TID-105 Hardware Fault Injection - Control Flow Modification
An embedded-device threat in the Hardware category. A threat actor with physical access to a device may be able to manipulate the processor's intended code execution by subjecting it to hardware faults or "glitching". Hardware faults...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-105-hardware-fault-injection-control-flow-modification
- TID-106 Data Bus Interception
An embedded-device threat in the Hardware category. A threat actor could intercept data across a data bus used to connect a process to either volatile memory or non-volatile storage (e.g. ROM, NVRAM, disk). Depending on the scope of the...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-106-data-bus-interception
- TID-107 Unauthorized Direct Memory Access (DMA)
MITRE EMB3D TID-107 (Unauthorized Direct Memory Access (DMA)) is an embedded-device threat in the Hardware category. If separate discrete chips/peripherals that have access to the same physical memory, a threat actor with access to one...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-107-unauthorized-direct-memory-access-dma
- TID-108 ROM/NVRAM Data Extraction or Modification
An embedded-device threat in the Hardware category. Contents of non-volatile memory chips or non-fixed storage (e.g., SD cards, Compact Flash, hard disks, USB sticks) can be directly read out for examination or modification by a chip...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-108-rom-nvram-data-extraction-or-modification
- TID-109 RAM Chip Contents Readout
An embedded-device threat in the Hardware category. If a threat actor can physically access a RAM chip, they may be able to readout the contents of the chip. Multiple techniques can be used to extract the contents of RAM, including both...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-109-ram-chip-contents-readout
- TID-110 Hardware Fault Injection - Data Manipulation
An embedded-device threat in the Hardware category. Certain software-executed attacks can introduce a fault to the physical hardware of the device, leading to greater access or exploit opportunities. Typically, these kinds of attacks...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-110-hardware-fault-injection-data-manipulation
- TID-111 Untrusted External Storage
An embedded-device threat in the Hardware category. An untrusted storage peripheral (e.g., USB) could be connected to the device. If malicious code is executed from the untrusted storage, or transferred to the device, it could provide a...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-111-untrusted-external-storage
- TID-113 Unverified Peripheral Firmware Loaded
An embedded-device threat in the Hardware category. A threat actor could manipulate the firmware associated with a device's peripheral or other subcomponent. The threat actor may be able to manipulate actions on the device by sending it...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-113-unverified-peripheral-firmware-loaded
- TID-114 Peripheral Data Bus Interception
An embedded-device threat in the Hardware category. Messages and data passing between discrete sub-components and peripherals may be intercepted and/or modified from through the peripheral bus (e.g., SPI, I2C, ISA, PCI, USB). Captured...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-114-peripheral-data-bus-interception
- TID-115 Firmware/Data Extraction via Hardware Interface
An embedded-device threat in the Hardware category. Unprotected programming or debugging interfaces may be used to extract device firmware, exposing it to reverse engineering that may reveal proprietary information, other exploitable...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-115-firmware-data-extraction-via-hardware-interface
- TID-116 Latent Privileged Access Port
An embedded-device threat in the Hardware category. If a device has a latent user access port, it may be possible for attackers to leverage physical access to obtain privileges that were not accounted for when considering software or...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-116-latent-privileged-access-port
- TID-118 Weak Peripheral Port Electrical Damage Protection
An embedded-device threat in the Hardware category. If a threat actor has physical access to a device, they may be able to cause physical damage to the circuit board of a device, in some cases even destroying the device. A malicious...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-118-weak-peripheral-port-electrical-damage-protection
- TID-119 Latent Hardware Debug Port Allows Memory/Code Manipulation
An embedded-device threat in the Hardware category. Hardware debugging ports (e.g., JTAG, SWD, etc.) oftentimes have high privileges or direct access to the running device's memory and integrated hardware. By leveraging one of these...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-119-latent-hardware-debug-port-allows-memory-code-manipulation
[system-software] System Software
- TID-201 Inadequate Bootloader Protection and Verification
An embedded-device threat in the System Software category. Some devices utilize bootloaders that are either stored in writable memory or memory that can be made writable. It may then be possible for a threat actor to alter the contents...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-201-inadequate-bootloader-protection-and-verification
- TID-202 Exploitable System Network Stack Component
An embedded-device threat in the System Software category. Devices may have vulnerabilities within software used to parse various network protocols. If the device does not properly parse a protocol, a threat actor can send improperly...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-202-exploitable-system-network-stack-component
- TID-203 Malicious OS Kernel Driver/Module Installable
An embedded-device threat in the System Software category. Threat actors may be able to install a driver or kernel module with malicious code to load a rootkit and manipulate the OS. Drivers and kernel modules generally operate with a...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-203-malicious-os-kernel-driver-module-installable
- TID-204 Untrusted Programs Can Access Privileged OS Functions
An embedded-device threat in the System Software category. Without a correctly enforced operating system privilege model, a compromised or untrusted application program could access to data, memory, or programs associated with the...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-204-untrusted-programs-can-access-privileged-os-functions
- TID-205 Existing OS Tools Maliciously Used for Device Manipulation
An embedded-device threat in the System Software category. If a threat actor has access to a valid OS account, they can utilize existing OS tools and system calls to install malicious code or manipulate device operations. If the account...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-205-existing-os-tools-maliciously-used-for-device-manipulation
- TID-206 Memory Management Protections Subverted
An embedded-device threat in the System Software category. While the use of memory permissions, such as non-executable stack and heap memory, can prevent threat actors from injecting and executing malicious code, it is still possible to...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-206-memory-management-protections-subverted
- TID-207 Container Escape
An embedded-device threat in the System Software category. Container environments, such as Docker and Kubernetes, share the same underlying kernel as the host operating system. Malicious code that succeeds in executing within a...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-207-container-escape
- TID-208 Virtual Machine Escape
An embedded-device threat in the System Software category. Virtualization mechanisms allow multiple operating sytem instances to share the same underlying hardware. Hypervisor software is responsible for orchestrating and maintaining...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-208-virtual-machine-escape
- TID-209 Host Can Manipulate Guest Virtual Machines
An embedded-device threat in the System Software category. If a threat actor can access a hypervisor's host infrastructure, such as through existing management interfaces, they could use that access to manipulate associated...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-209-host-can-manipulate-guest-virtual-machines
- TID-210 Device Vulnerabilities Unpatchable
An embedded-device threat in the System Software category. Threat actors will frequently target device components, like firmware, that have already known vulnerabilities instead of expending the effort to discover new ones. If a device...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-210-device-vulnerabilities-unpatchable
- TID-211 Device Allows Unauthenticated Firmware Installation
An embedded-device threat in the System Software category. If a device does not have a mechanism to authenticate firmware updates, a threat actor may be able to install malicious or corrupt firmware on the device. In such cases, an...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-211-device-allows-unauthenticated-firmware-installation
- TID-212 FW/SW Update Integrity Shared Secrets Extraction
An embedded-device threat in the System Software category. Some devices utilize a shared secret authentication scheme to verify firmware updates. This is an improvement over unauthenticated updates (as in TID-211) and can be coupled...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-212-fw-sw-update-integrity-shared-secrets-extraction
- TID-213 Faulty FW/SW Update Integrity Verification
An embedded-device threat in the System Software category. To avoid the weaknesses of a shared secret verification (see TID-212), devices may utilize a digital signature verification scheme based on asymmetric public key cryptography....
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-213-faulty-fw-sw-update-integrity-verification
- TID-214 Secrets Extracted from Device Root of Trust
An embedded-device threat in the System Software category. Some device have mutable or immutable secure Roots of Trust (ROTs) that may store keys or secrets. If the device has a ROT mechanism to validate the authenticity of the...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-214-secrets-extracted-from-device-root-of-trust
- TID-215 Unencrypted SW/FW Updates
An embedded-device threat in the System Software category. If the firmware/software update is not encrypted at rest in storage it can be reverse engineered to identify potential vulnerabilities or extract other information needed to...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-215-unencrypted-sw-fw-updates
- TID-216 Firmware Update Rollbacks Allowed
An embedded-device threat in the System Software category. Firmware updates will oftentimes include fixes to security vulnerabilities, meaning that past versions will contain security threats to the devices. If a threat actor can...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-216-firmware-update-rollbacks-allowed
- TID-217 Remotely Initiated Updates Can Cause DoS
An embedded-device threat in the System Software category. When firmware/software update process is initiated on a device, it may enter a different operational mode where it stops performing key functions, including networking, data...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-217-remotely-initiated-updates-can-cause-dos
- TID-218 Operating System Susceptible to Rootkit
An embedded-device threat in the System Software category. A threat actor may be able to install a rootkit that can manipulate the operating system (OS). Rootkits can evade OS protections by installing themselves at the same...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-218-operating-system-susceptible-to-rootkit
- TID-219 OS/Kernel Privilege Escalation
An embedded-device threat in the System Software category. Operating Systems and Kernels frequently run at the highest levels of permissions. If processes with lower permissions are able to exploit a vulnerability in the OS or Kernel...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-219-os-kernel-privilege-escalation
- TID-220 Unpatchable Hardware Root of Trust
An embedded-device threat in the System Software category. Hardware roots of trust can be used to support many desirable device security functions, such as secure key and secret storage, secure boot, and firmware integrity measurement....
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-220-unpatchable-hardware-root-of-trust
- TID-221 Authentication Bypass By Message Replay
An embedded-device threat in the System Software category. Some devices will allow for authentication over the network, but do not implement mechanisms (i.e. nonces, timestamps) to ensure that messages containing credentials cannot be...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-221-authentication-bypass-by-message-replay
- TID-222 Critical System Service May Be Disabled
An embedded-device threat in the System Software category. Various devices and associated services are necessary to support communications and connections on a network. If a key service is disabled, terminated, or reconfigured, a threat...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-222-critical-system-service-may-be-disabled
- TID-223 System Susceptible to RAM Scraping
An embedded-device threat in the System Software category. If the threat actor can obtain sufficient privileges on the devices, they may be able to install runtime tools to directly extract the contents of some or all of the system RAM....
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-223-system-susceptible-to-ram-scraping
- TID-224 Excessive Access via Software Diagnostic Features
An embedded-device threat in the System Software category. If a device has debugging capabilities (e.g., diagnostic tools, debug logs, etc.) that are not authenticated or can be accessed in unintended ways, it may be possible for a...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-224-excessive-access-via-software-diagnostic-features
- TID-225 Logs can be manipulated on the device
An embedded-device threat in the System Software category. Threat actors may try to manipulate logs on the device to evade defenses, confuse incident responders, hide their access techniques, or keep their exploitation methods secret....
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-225-logs-can-be-manipulated-on-the-device
- TID-226 Device leaks security information in logs
An embedded-device threat in the System Software category. Some devise will login information that can be exploited by attackers to further their attack against the device or the system in which the device resides. This data can vary,...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-226-device-leaks-security-information-in-logs
[application-software] Application Software
- TID-301 Applications Binaries Modified
An embedded-device threat in the Application Software category. A threat actor could modify application-level binaries or libraries on the device to introduce unauthorized code, maintain persistence, or evade detection. This could also...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-301-applications-binaries-modified
- TID-302 Install Untrusted Application
An embedded-device threat in the Application Software category. A threat actor can install a malicious program to the device to manipulate its operations or prevent the device from operating as expected. Devices can utilize a variety of...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-302-install-untrusted-application
- TID-303 Excessive Trust in Offboard Management/IDE Software
An embedded-device threat in the Application Software category. If device management is intended to be performed by a dedicated engineering software platform or integrated development environment (IDE), the threat actor could...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-303-excessive-trust-in-offboard-management-ide-software
- TID-304 Manipulate Runtime Environment
An embedded-device threat in the Application Software category. A threat actor can manipulate the runtime environments on a device to maintain persistence on the device and overwrite various functionalities, such as protocol handlers....
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-304-manipulate-runtime-environment
- TID-305 Program Executes Dangerous System Calls
An embedded-device threat in the Application Software category. If the device allows the downloading and execution of native binaries on the device, a threat actor can deploy a malicious program that leverages the environment's...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-305-program-executes-dangerous-system-calls
- TID-306 Sandboxed Environments Escaped
An embedded-device threat in the Application Software category. While restricting the execution of external programs within a sandboxed execution environment can mitigate the threat of programs having excessive privileges or memory...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-306-sandboxed-environments-escaped
- TID-307 Device Code Representations Inconsistent
An embedded-device threat in the Application Software category. Many devices that allow the execution of custom application programs, such as IEC 61131 based programs, also support "program uploads" to extract the running code from the...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-307-device-code-representations-inconsistent
- TID-308 Code Overwritten to Avoid Detection
An embedded-device threat in the Application Software category. The threat actor can overwrite a previously deployed/installed malicious program with a dummy program in order to evade the detection of the malicious program. This can be...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-308-code-overwritten-to-avoid-detection
- TID-309 Device Exploits Engineering Workstation
An embedded-device threat in the Application Software category. If the integrated development environment (IDE) or vendor software that is used to manage a device is not sufficiently secure, it could be exploited or crashed when it...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-309-device-exploits-engineering-workstation
- TID-310 Remotely Accessible Unauthenticated Services
An embedded-device threat in the Application Software category. If an application does not authenticate all connections from a remote device or system, a threat actor can remotely establish a connection to the device to access...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-310-remotely-accessible-unauthenticated-services
- TID-311 Default Credentials
An embedded-device threat in the Application Software category. Devices often include default credentials from the vendor. Default credentials can be changed but are often overlooked when devices are commissioned. If left unchanged, a...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-311-default-credentials
- TID-312 Credential Change Mechanism Can Be Abused
An embedded-device threat in the Application Software category. A device's credential change mechanisms can be abused to lock out users from their own devices by changing credentials to something unknown to the legitimate user. This...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-312-credential-change-mechanism-can-be-abused
- TID-313 Unauthenticated Session Changes Credential
An embedded-device threat in the Application Software category. A threat actor can change or reset a password or credential without being authenticated. This can be used by a threat actor to set the credential to a known value and then...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-313-unauthenticated-session-changes-credential
- TID-314 Passwords Can Be Guessed Using Brute-Force Attempts
An embedded-device threat in the Application Software category. A threat actor could gain unauthorized access by continually guessing passwords. This could be because the device allows passwords with insufficient entropy, short password...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-314-passwords-can-be-guessed-using-brute-force-attempts
- TID-315 Password Retrieval Mechanism Abused
An embedded-device threat in the Application Software category. If the device includes a password retrieval mechanism, a threat actor could use that mechanism to retrieve a valid credential and then access the device. Password retrieval...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-315-password-retrieval-mechanism-abused
- TID-316 Incorrect Certificate Verification Allows Authentication Bypass
An embedded-device threat in the Application Software category. Certificate-based authentication depends on the correct parsing and validation of an X.509 certificate. However, if the certificate is not properly parsed and all fields...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-316-incorrect-certificate-verification-allows-authentication-bypass
- TID-317 Predictable Cryptographic Key
An embedded-device threat in the Application Software category. If the device does not generate sufficiently random cryptographic primitives, a threat actor could predict or brute-force guess a key to either gain unauthorized access to...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-317-predictable-cryptographic-key
- TID-318 Insecure Cryptographic Implementation
An embedded-device threat in the Application Software category. The device uses a cryptographic library or implementation that either introduces an additional software vulnerability within the library. A threat actor can exploit these...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-318-insecure-cryptographic-implementation
- TID-319 Cross Site Scripting (XSS)
MITRE EMB3D TID-319 (Cross Site Scripting (XSS)) is an embedded-device threat in the Application Software category. The device does not properly restrict, filter, or validate the content of web-based requests or outputs, especially...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-319-cross-site-scripting-xss
- TID-320 SQL Injection
An embedded-device threat in the Application Software category. The device does not property restrict, filter, or validate the content of web-based requests, especially content used to construct SQL commands or HTTP pages. A threat...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-320-sql-injection
- TID-321 HTTP Application Session Hijacking
An embedded-device threat in the Application Software category. A threat actor can hijack an insufficiently protected HTTP session token to gain unauthorized access to a device. HTTP session tokens can be obtained by a threat actor if...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-321-http-application-session-hijacking
- TID-322 Cross Site Request Forgery (CSRF)
MITRE EMB3D TID-322 (Cross Site Request Forgery (CSRF)) is an embedded-device threat in the Application Software category. If a threat actor can include malicious JavaScript within a page viewed by a legitimate device user, that script...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-322-cross-site-request-forgery-csrf
- TID-323 Path Traversal
An embedded-device threat in the Application Software category. A threat actor can send requests for files or content that resides in different directories from those intended to be accessible by the web server. This can be used to gain...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-323-path-traversal
- TID-324 HTTP Direct Object Reference
An embedded-device threat in the Application Software category. If a device does not properly authenticate all HTTP requests, a threat actor can directly send a request to a specific URL to access data or initiate a device function....
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-324-http-direct-object-reference
- TID-325 HTTP Injection/Response Splitting
An embedded-device threat in the Application Software category. The device uses HTTP headers that are unencrypted, not-validated, and/or unauthenticated. This means that the device may accept and process arbitrary data coming to the...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-325-http-injection-response-splitting
- TID-326 Insecure Deserialization
An embedded-device threat in the Application Software category. Many object-oriented languages use serialization to convert class objects into byte strings for more efficient storage or transmission. However, if an untrusted byte string...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-326-insecure-deserialization
- TID-327 Out of Bounds Memory Access
An embedded-device threat in the Application Software category. If an application does not properly restrict data writes to allocated memory locations, a threat actor could send an input or message that writes data outside of intended...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-327-out-of-bounds-memory-access
- TID-328 Hardcoded Credentials
An embedded-device threat in the Application Software category. Hardcoded credentials typically cannot be changed by end-users and are often undocumented, leaving the end-user unaware of the risk. If a threat actor is able to discover...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-328-hardcoded-credentials
- TID-329 Improper Password Storage
An embedded-device threat in the Application Software category. If a device stores passwords in an unsafe manner (e.g., in a cleartext file with no read restrictions) it may be possible for threat actors to retrieve system or user...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-329-improper-password-storage
- TID-330 Cryptographic Timing Side-Channel
An embedded-device threat in the Application Software category. Algorithms or code implementations of cryptographic processes will sometimes leak information by ending operations early or late based on, and correlated with, the...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-330-cryptographic-timing-side-channel
[networking] Networking
- TID-401 Undocumented Protocol Features
An embedded-device threat in the Networking category. Some devices may support proprietary protocols, or may add proprietary functionality to open protocols. Many of the custom functions or commands may not be sufficiently documented....
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-401-undocumented-protocol-features
- TID-404 Remotely Triggerable Deadlock/DoS
An embedded-device threat in the Networking category. Some devices will have operating modes that put the device in an inoperable state. Devices may also have network parsing or protocol vulnerabilities that can put the device in a...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-404-remotely-triggerable-deadlock-dos
- TID-405 Network Stack Resource Exhaustion
An embedded-device threat in the Networking category. Remote connections and communications can consume various device resources (e.g., network stack buffers, packet processing, socket connections) that, if exhausted, could lead to the...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-405-network-stack-resource-exhaustion
- TID-406 Unauthorized Messages or Connections
An embedded-device threat in the Networking category. Some devices operate using protocols that have no capacity for network-level authentication, connection, or creation of sessions on-device, therefore allowing a threat actor to...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-406-unauthorized-messages-or-connections
- TID-407 Missing Message Replay Protection
An embedded-device threat in the Networking category. Threat actors may be able to replay a message to a device to cause an unwanted function, send an unwanted command, or gain access to privileged data. Message replaying can be used to...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-407-missing-message-replay-protection
- TID-408 Unencrypted Sensitive Data Communication
An embedded-device threat in the Networking category. Some devices do not adequately encrypt communications that includes operational or management information. Without adequate encryption, a threat actor can eavesdrop on the...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-408-unencrypted-sensitive-data-communication
- TID-410 Cryptographic Protocol Side Channel
An embedded-device threat in the Networking category. While encrypting data can prevent a threat actor from directly obtaining the plaintext communication, a threat actor may be able to infer information about the device or communicated...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-410-cryptographic-protocol-side-channel
- TID-411 Weak/Insecure Cryptographic Protocol
An embedded-device threat in the Networking category. The device utilizes a weak or insecure cryptographic protocol or algorithm that can be broken or undermined. This could allow the threat actor to extract plaintext information from...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-411-weak-insecure-cryptographic-protocol
- TID-412 Network Routing Capability Abuse
An embedded-device threat in the Networking category. Some devices will allow for the forwarding of packets to other connected devices (e.g., routing, port forwarding, tunneling, VPN). If the device is used to forward or route...
Bidda node: https://bidda.com/intelligence/mitre-emb3d-tid-412-network-routing-capability-abuse
Full interactive matrix: https://bidda.com/mitre-emb3d
MITRE source: https://emb3d.mitre.org/