Matching RIoH

URI: MP-RIoH

Package: NetworkConnectivity

< prev | next >

Description: Finds an open network path to the Internet from (but not via) a Host connected to a local subnet, and the associated network interface and access context, plus the location contexts for the host being on that subnet, and optionally the host manager.

Root Pattern: R-RIoH

R-RIoH

Finds an open network path to the Internet from a Host connected to a local subnet, and the associated network interface and access context.

Threat Patterns (1)

H.M.RIoH.7

Remote root access from AttackerSubnet via LogicalSubnet to back door on device Host: an attacker with access to AttackerSubnet gains access to host Host via a previously installed back door providing a reverse shell via LogicalSubnet .