Application exploit (RCE)

Info

ID: MS-TA7009
Tactic: Execution
MITRE technique:

Deployed web applications that contain a remote code execution vulnerability, or a vulnerability that could eventually lead to code execution, can enable attackers to run malicious code in the web application context. If the application has access to any additional resources, then the attacker could access those as well.

Mitigations

ID	Mitigation	Description
MS-M7004	Maintain up-to-date dependencies	Patch application code, frameworks, and libraries to eliminate exploitable vulnerabilities.
MS-M7005	Implement application security testing	Use SAST, DAST, and dependency scanning to identify and remediate RCE risks.
MS-M7006	Deploy a web application firewall (WAF)	Block exploit attempts targeting deserialization, template injection, or command execution vulnerabilities.