Threat P.O.PILSsSC.0

URI: P.O.PILSsSC.0

Package: ProcessComms

< prev | next >

Description: Service Service running on host SHost overloaded by messages from LogicalSubnet: if the interface between SHost and LogicalSubnet is overloaded, and service Service is listening for client messages on that interface, then the overload also affects Service.

Threat Type: Secondary Threat

Matching Pattern:

P.O.PILSsSC.0
MP-PILSsSC

Finds a Process running on a Host connected via an Interface to a Logical Subnet, where the Process acts as a Service to at least one client communicating over that Interface, any of which is sufficient to cause a threat.

P.O.PILSsSC.0
I.O.DDoH.3

Remote DDoS attack from AttackerSubnet on Host connection to LogicalSubnet: an attacker able to orchestrate clients on subnet AttackerSubnet arranges for them to send too many messages to the network address of the target device Host on LogicalSubnet.
P.O.PILSsSC.0
I.O.HIoH.3.1

Remote DoS attack from LogicalSubnet on Host: an attacker with access to subnet LogicalSubnet sends too many messages to the network address of the connected target device Host.
P.O.PILSsSC.0
I.O.HIoH.3.2

Remote DDoS attack from LogicalSubnet on Host: an attacker able to orchestrate clients on subnet LogicalSubnet arranges for them to send too many messages to the network address of the connected target device Host.
P.O.PILSsSC.0
I.O.IoH.3

Remote DoS attack from AttackerSubnet on Host connection to LogicalSubnet: an attacker with remote access to Layer 3 subnet LogicalSubnet sends too many messages to the network address of the target device Host on LogicalSubnet.
P.O.PILSsSC.0
I.O.LoH.3

Adjacent DoS attack on Host from LogicalSubnet: an attacker with access to Layer 2 subnet LogicalSubnet sends too many messages to the hardware address of a target device Host connected to that subnet.
P.O.PILSsSC.0
I.O.RoH.3

Remote DoS attack from AttackerSubnet on Host connection to LogicalSubnet: an attacker with remote access to Layer 3 subnet LogicalSubnet sends too many messages to the network address of the target device Host on LogicalSubnet.
P.O.PILSsSC.0
SC.IS.SCmSg.8.1

Privileged channel between Client and Service in service: if all routes via gateways plus the final interface to the service host are enabled despite any default firewall rules, then the network path from Client is open and could potentially be exploited in other threats.
P.O.PILSsSC.0
SC.IS.SCpSg.8.1

Privileged channel between Client and Service in service: if access to Service from LogicalSubnet is enabled despite any default firewall rules, then the network path from Client is open and could potentially be exploited in other threats.

        (empty)

        (empty)

        (empty)