T1011Exfiltration
Exfiltration Over Other Network Medium
Adversaries may attempt to exfiltrate data over a different network medium than the command and control channel. If the command and control network is a wired Internet connection, the exfiltration may occur, for example, over a WiFi connection, modem, cellular data connection, Bluetooth, or another radio frequency (RF) channel. Adversaries may choose to do this if they have sufficient access or…
CVEs4
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.4
Reports0
CVEs linked to Exfiltration Over Other Network Medium
4 CVEs, by priority. Each link shows its badge.- CVE-2024-40891Zyxel DSL CPE OS Command Injection VulnerabilityZyxel · DSL CPE DevicesKEVPublic exploitHigh · 8.8T1055Process InjectionT1011Exfiltration Over Other Network MediumMITRE CTID mapping of the KEV entry · primary impact22.9%Top 2.3%68.7priority
- CVE-2024-40890Zyxel DSL CPE OS Command Injection VulnerabilityZyxel · DSL CPE DevicesKEVHigh · 8.8T1055Process InjectionT1011Exfiltration Over Other Network MediumMITRE CTID mapping of the KEV entry · primary impact20.7%Top 2.5%63.7priority
- CVE-2024-53150Linux Kernel Out-of-Bounds Read VulnerabilityMITRE CTID mapping of the KEV entry · follow-on activity1.4%Top 28%57.3priority
- CVE-2024-50302Linux Kernel Use of Uninitialized Resource VulnerabilityMITRE CTID mapping of the KEV entry · follow-on activity0.8%Top 43%53.2priority