Threat Sg.TA.L3SSg2AC.1

URI: Sg.TA.L3SSg2AC.1

Package: ProcessComms

< prev | next >

Description: Port forwarding between FromSubnet and ToSubnet re-enabled at Gateway: if an attacker has admin rights on gateway device Gateway, they can enable port forwaarding between FromSubnet and ToSubnet.

Threat Type: Primary Threat

Matching Pattern:

Sg.TA.L3SSg2AC.1
MP-L3SSg2AC

Finds a gateway from an IP subnet to a distinct IP subnet, along with the forward and (open) return path segments via the gateway, and a context in which the gateway is connected to both subnets.

        (empty)

        (empty)

        (empty)