Skip to main content

Main navigation

Automotive
Rail
Resources

Fulltext search

Manipulate Environment

ATE-001: Downgrade Attacks via Rogue Base station

ATE-002: Rogue Cellular Base Station

ATE-003: Rogue Wi-Fi Access Points

ATE-004: GNSS Attacks

ATE-004.01: GNSS Spoofing Attacks

ATE-004.02: GNSS Jamming

ATE-005: Sybil Attack

ATE-006: Camera Attacks

ATE-006.01: General Attacks on Camera Systems

ATE-006.02: Camera Feature Attacks

ATE-006.03: Blinding the Camera

ATE-007: LiDAR Attacks

ATE-007.01: LiDAR Replay Attacks

ATE-007.02: LiDAR Relaying Attack

ATE-007.03: LiDAR Spoofing Attacks

ATE-007.04: LiDAR Jamming / Saturation Attack

ATE-008: Spoofing FMCW Radar

ATE-009: Black Hole Attacks

ATE-010: TPMS Attacks

ATE-010.01: TPMS Jamming

ATE-010.02: TPMS Spoofing

ATE-011: Attacks on Road Side Units/Balise

Initial Access

ATE-012: Radio Data System (RDS) Attacks

ATE-013: Malicious SMS

ATE-014: Exploitation of Wi-Fi Stack

ATE-015: Gain access to Wi-Fi Hotspot

ATE-016: Exploitation via Bluetooth

ATE-017: Exploitation via C-V2X

ATE-018: Exploitation via DSRC

ATE-019: Exploitation via Repair Shop/Garage/Factory

ATE-020: Exploitation of OBD Dongles

ATE-021: Hardware addition

ATE-021.01: Physical Access (CAN-Injection)

ATE-021.02: Connect device network via USB-Ethernet

ATE-021.03: Code Execution via USB

ATE-021.04: Code Execution via SD Card

ATE-021.05: Code Execution via CD

ATE-022: Exploitation via OBD Interface

ATE-023: Supply Chain Compromise

ATE-024: Unsecured Web APIs

ATE-025: Hacking in-vehicle apps

ATE-026: Malicious App Delivery

ATE-027: Drive-by Compromise

ATE-028: Exploitation via charging station

ATE-029: Keyless Go Attacks

ATE-029.01: Replay Attack

ATE-029.02: Relay Attack

ATE-029.03: Roll Jam Attack

ATE-029.04: Roll Back Attack

ATE-030: Service Compartment Access

ATE-031: Maintenance Notebook Infection

ATE-032: Exploitation of Internet Accessible Device

ATE-033: Remote Maintenance Accesspoint

ATE-079: Exfiltration via Removable Media

Execution

ATE-034: Command and Scripting Interpreter

ATE-035: Inter-process Communication: D-Bus

ATE-036: Native API

ATE-037: Scheduled Task/Job

ATE-038: User Execution

Persistence

ATE-039: Persistence via Credentials

ATE-040: Firmware Installation - Reprogram ECU

ATE-041: Modify OS Kernel, Boot / System Partition

ATE-042: Modify TEE

Privilege Escalation

ATE-043: Exploit Application Vulnerability

ATE-044: Exploit OS Vulnerability

ATE-045: Hardware Fault Injection

ATE-047: Reprogram ECU for privilege escalation

Defense Evasion

ATE-048: Bypass SecurityAccess

ATE-049: Bypass Code Signing Check

ATE-050: Firmware Installation - Reprogram ECU: Downgrade

ATE-051: Deactivate Immobilizer

ATE-052: Downgrade to insecure protocol

ATE-053: Enable Remote Functions

Credential Access

ATE-054: Adversary-in-the-Middle

ATE-055: Brute Force

ATE-056: Input Capture

ATE-057: SMS Message Capture

ATE-058: Network Sniffing

ATE-059: OS Credential Dumping

ATE-060: Unsecured Credentials

ATE-061: Exploit TEE Vulnerability

Discovery

ATE-062: ECU Discovery

ATE-063: ECU Service Discovery

ATE-064: Network Service Scanning

Lateral Movement

ATE-065: Exploitation of Remote Services

ATE-066: Remote Services

ATE-067: Replication Through Removable Media

ATE-068: Exploit ECU for Lateral Movement

ATE-069: Bridge Vehicle Networks

Collection

ATE-070: Gather information about ECU

ATE-071: Audio Capture

ATE-072: Screen Capture

ATE-073: Video Capture

Command and Control

ATE-074: C2 via SMS

ATE-075: C2 via Short Range Wireless Communication

ATE-076: C2 via Mid Range Wireless Communication

ATE-077: C2 via Wide Range Wireless Communication

Exfiltration

ATE-078: Exfiltration via Memory mapped Registers

ATE-080: Exfiltration via SMS

ATE-081: Exfiltration via C-V2X

ATE-082: Exfiltration via DSRC

Affect Vehicle Function

ATE-083: Control Horn

ATE-084: Control HVAC

ATE-085: Control Engine

ATE-086: Control Doors

ATE-087: Control Lights

ATE-088: Control Airbag

ATE-089: Control Windows

ATE-090: Speed control

ATE-091: Speed control via Radio

ATE-092: Send halt signal via Radio

ATE-093: Manipulate Passenger Information System

ATE-094: Control Instrument Panel Cluster (IPC)

ATE-095: Denial of Service

ATE-096: Message Injection

ATE-097: Control Brake

Impact

ATE-098: Denial of Control

ATE-099: Denial of View

ATE-100: Loss of Control

ATE-101: Enable premium features

ATE-102: Chip Tuning

ATE-103: Odometer fraud

ATE-104: Vehicle Theft

Home
Hardware addition

Hardware addition

TID

ATE-021

NA

Tactic

Type

Technique

Severity of Impact

High

Severity of Feasibility

High

Scalability

Not

Domain

Automotive

Rail

Powered By

Yekta IT GmbH Incyde GmbH

Information

Contact

Rechtliches

Privacy policy
Imprint