Detailedlikelihood: Mediumseverity: LowStable

CAPEC-324TCP (ISN) Sequence Predictability Probe

Abstraction
Detailed
Status
Stable
Likelihood
Medium
Severity
Low

Description

This type of operating system probe attempts to determine an estimate for how predictable the sequence number generation algorithm is for a remote host. Statistical techniques, such as standard deviation, can be used to determine how predictable the sequence number generation is for a system. This result can then be compared to a database of operating system behaviors to determine a likely match for operating system and version.

Related weaknesses· 1

CWE-200

Related attack patterns· 1

CAPEC-312 (ChildOf)

Exploits1

TypeTargetConfidenceTier
WeaknessExposure of Sensitive Information to an Unauthorized Actorcwe-200100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CAPEC
TCP (ISN) Counter Rate Probe
CAPEC
TCP Sequence Number Probe
CAPEC
TCP (ISN) Greatest Common Divisor Probe
CAPEC
IP ID Sequencing Probe
CAPEC
TCP Options Probe
CAPEC
TCP Initial Window Size Probe
Sourced from MITRE CAPEC. Curated by Adam Lundqvist, SQUR.