Threat Sg.DA.L3SSg2AC-b.1

URI: Sg.DA.L3SSg2AC-b.1

Package: NetworkConnectivity

< prev | next >

Description: Routing between FromSubnet and ToSubnet re-disabled at Gateway: if an attacker has admin rights on host Gateway in a context where it is connected to FromSubnet and ToSubnet, then they can override a default policy to drop connection being routed between those subnets.

Threat Type: Primary Threat

Matching Pattern:

MP-L3SSg2AC-b

Finds a gateway from one IP subnet to an IP subnet, along with the segment asset representing the route via the gateway, and a context in which the gateway is connected to both subnets, where this route is not blocked by default.