Threat Sg.TA.LTRevSg2AC.1

URI: Sg.TA.LTRevSg2AC.1

Package: LocalDeviceConnectivity

< prev | next >

Description: Reverse tethering re-enabled between Gateway and Host connecting to LogicalSubnet: if an attacker has control of host Gateway in a context where it is connected to LogicalSubnet and Host is paired with it, then they can reverse tether Host and connect Host to LogicalSubnet.

Threat Type: Primary Threat

Matching Pattern:

Sg.TA.LTRevSg2AC.1
MP-LTRevSg2AC

Finds a Host connected via a layer 1 subnet (i.e., Bluetooth or USB) connection and a reverse tethered gateway to an IP subnet, and the forward path segment via the gateway, and a context in which the gateway is connected to both subnets.

        (empty)

        (empty)

        CSG-DisableTethering

        (empty)