HoT-TAI-0019: Insecure password recovery mechanism / Lost access procedures

Summary:

• CWE-640 Weak Password Recovery Mechanism for Forgotten Password

Estimated Overall Risk Assessment:HIGH/MID/LOW

• Technical Impacts:

• Business Impacts:

• Detectability:

• Prevalence:

• Exploitability:

Attack Surfaces Grouped By Layer of Cyberspace

• Physical Network Layer
  • Device Network Services
  • Administrative Interface
  • Device Web Interface
  • Mobile Application
  • Ecosystem (General)
• Logical Network Layer
  • Cloud Web Interface

Known Intrusion / Exploit / Attack Cases and Threats

TBD

Identify, Detect, Protect, Respond, and Recover (NIST FICIC)

TBD

Analysis Tools and Training

TBD

Associated CVEs / Manufacturers / Devices

TBD

References

TBD