T1601Defense Impairment
Modify System Image
Adversaries may make changes to the operating system of embedded network devices to weaken defenses and provide new capabilities for themselves. On such devices, the operating systems are typically monolithic and most of the device functionality and capabilities are contained within a single file. To change the operating system, the adversary typically only needs to affect this one file…
CVEs1
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.1
Reports0
CVEs linked to Modify System Image
1 CVE, by priority. Each link shows its badge.- CVE-2021-44168Fortinet FortiOS Arbitrary File DownloadMITRE CTID mapping of the KEV entry · primary impact0.9%Top 40%60.4priority