Threat H.M.HmAC.0

H.M.CHS.3.1

Console access to unprotected admin account on host Host in Space: an attacker with access to the physical space Space where the device is located uses console access to get root access via an unprotected admin account.

H.M.HmAC.1.1

Root access to Host by its provider: anyone who controls resource allocation for devices of class Host can provision an instance and for grant admin privileges to themselves.

H.M.HmAC.1.2

Root access to Host by an unauthorized agent: if it is believed that an unauthorized and possibly unknown actor has admin rights on Host, it must be assumed they could exploit those rights in any context.

H.M.HumCHS-iP.3.2

Unauthorised console access to an admin account on host Host in Space: an attacker with physical access to device Host in location Space exploits lax password security by user Human to gain root privileges via the console.

H.M.HumHoSt.1

Insider attack by HostManager abusing admin rights on Host: if the manager HostManager of device Host is untrustworthy, they can use their privileges to enable attacks involving Host.

H.M.HumHSt.1

Insider attack by employee HostManager of Employer abusing admin rights on Host: the manager HostManager of device Host may be persuaded by an untrustworthy employer Employer to abuse their rights and enable attacks involving Host.

H.M.SHmACRLnSAC.1

Use of login via RemoteAccessService to control Host in Space: anyone with local rights (i.e. at command shell level) for root remote access service RemoteAccessService controlling Host when it is in location Space also has admin rights on Host in the same context.

H.M.IoH.3

Remote root access from AttackerSubnet via LogicalSubnet to insecure device Host: an attacker with access to AttackerSubnet gains access to host Host via an unprotected yet privileged service listening on LogicalSubnet .

H.M.NoH.3

Remote root access from AttackerSubnet via LogicalSubnet to insecure device Host: an attacker with access to AttackerSubnet gains access to host Host via an unprotected yet privileged service listening on LogicalSubnet .

H.M.RIoH.7

Remote root access from AttackerSubnet via LogicalSubnet to back door on device Host: an attacker with access to AttackerSubnet gains access to host Host via a previously installed back door providing a reverse shell via LogicalSubnet .

H.M.RNoH.7

Remote root access from AttackerSubnet via LogicalSubnet to back door on device Host: an attacker with access to AttackerSubnet gains access to host Host via a previously installed back door providing a reverse shell via LogicalSubnet .

H.M.HAC.4

Attacker exploit gains admin rights at Host when it is in location Space: the attacker exploits a vulnerability in device Host in context HostAccess and gains control over the device in that context.

H.M.HmACPAC.4

Attacker exploit at Process in location Space gains admin rights at Host: the attacker exploits a vulnerability in the process Process when its host Host is in Space, and is able to escalate privileges to gain admin rights on Host in that context.

(empty)