Misbehaviour LossOfExtrinsic-U-TW

URI: LossOfExtrinsic-U-TW

Package: VulnerabilityCVSS

< prev | next >

Description: Discovery by potential attackers of a vulnerability whose exploitation would allow an attacker user level access.

This misbehaviour affects the trustworthiness attribute Extrinsic-U-TW

Threats that cause this misbehaviour (1)

P.E-U.SHP-iT.8

Vulnerability (U) discovered at Process: software vulnerability found in process Process, which could allow user level access to its host device with the rights of the process, and may be known to attackers. Around 30 percent of vulnerabilities allow local user access to the vulnerable device (NVD 2015-2019).

Threats caused by affected trustworthiness attribute (2)

H.L.HAC.4

Attacker exploit gains user privileges at Host in location Space: the attacker exploits a vulnerability in device Host when it is located in Space, and gains user level access to the device in that context.

P.L.HPAC.4

Attacker exploit takes control of Process in Space: the attacker exploits a vulnerability in process Process when its host Host is located in Space, giving them control of the process behaviour and access to its privileges on Host when in that location.