V
Scaner-VS
HomeCatalogSourcesCWECAPECATT&CKMitigationsDocs
← Back to List
T0800ICS
Matrix: ICS
Status: Active
STIX: 19.0
Source ↗

Activate Firmware Update Mode

Adversaries may activate firmware update mode on devices to prevent expected response functions from engaging in reaction to an emergency or process malfunction. For example, devices such as protection relays may have an operation mode designed for firmware installation. This mode may halt process monitoring and related functions to allow new firmware to be loaded. A device left in update mode may be placed in an inactive holding state if no firmware is provided to it. By entering and leaving a device in this mode, the adversary may deny its usual functionalities.

Tactics

Inhibit Response Function

Platforms

None
Open in catalog with ATT&CK filter →

Related CAPECs

Affected vulnerabilities (Inferred)

No matches — refine the filter to see a result.