1523
CAPEC-ID Attack Pattern Name
668 Key Negotiation of Bluetooth Attack (KNOB)
CWE-694: Use of Multiple Resources with Duplicate Identifier
Weakness ID : 694
Structure : Simple
Abstraction : Base
Description
The product uses multiple resources that can have the same identifier, in a context in which unique
identifiers are required.
Extended Description
If the product assumes that each resource has a unique identifier, the product could operate on the
wrong resource if attackers can cause multiple resources to be associated with the same identifier.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 573 Improper Following of Specification by Caller 1298
ChildOf 99 Improper Control of Resource Identifiers ('Resource
Injection')