ATT&CK technique · T1011
Exfiltration Over Other Network Medium
Exfiltration· seen in 4 CISA KEV exploits
Full description, procedures and detections on attack.mitre.org
Weaknesses that lead here
Classes of exploited vulnerability that CTID maps to this technique.
- CWE-1251 KEV CVEOut-of-bounds ReadCode reads beyond a buffer, leaking secrets such as keys or memory addresses that defeat other defences.
- CWE-4001 KEV CVEUncontrolled Resource ConsumptionRequests can consume unbounded CPU, memory or connections, taking the service down.
- CWE-7701 KEV CVEAllocation of Resources Without Limits or ThrottlingNothing limits how much an attacker can make the system allocate.
- CWE-7871 KEV CVEOut-of-bounds WriteData is written outside the memory it belongs to; the most common root cause of exploited memory bugs.
Controls that mitigate it (5)
NIST SP 800-53 rev5, grouped by family (CTID mapping).
AC · Access Control
CM · Configuration Management
SC · System and Communications Protection
SI · System and Information Integrity
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial.