Unsecured Web APIs

The increasing use of APIs in vehicle systems provides entry points for adversaries. Unsecured APIs provide opportunities for adversaries to exploit them.

Tactic

Initial Access

Tactic_ID

ATA-002

Technique_ID

ATE-024

Severity of Impact

Critical

Severity of Feasibility

Medium

Scalability

Highly

Domain

Automotive

Rail

Manipulate Environment

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Affect Vehicle Function

Impact

Unsecured Web APIs