ATT&CK technique · T1602

Data from Configuration Repository

Collection· seen in 1 CISA KEV exploits

Full description, procedures and detections on attack.mitre.org

Weaknesses that lead here

Classes of exploited vulnerability that CTID maps to this technique.

CWE-4341 KEV CVEUnrestricted Upload of File with Dangerous TypeUploads aren't restricted, so an attacker uploads a script (a web shell) and then requests it.

Controls that mitigate it (25)

NIST SP 800-53 rev5, grouped by family (CTID mapping).

AC · Access Control

CA · Security Assessment and Authorization

CA-7Continuous Monitoring

CM · Configuration Management

IA · Identification and Authentication

SC · System and Communications Protection

SI · System and Information Integrity

Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial.