System Firmware Technique ID T0857 Tactic Persistence, Inhibit Response Function Data Sources Firmware : Firmware Modification Network Traffic : Network Traffic Flow Asset Safety Instrumented System/Protection Relay, Field Controller/RTU/PLC/IED, Input/Output Server. An adversary may exploit the firmware update feature on accessible devices to upload malicious or out-of-date firmware. Malicious modification of device firmware may provide an adversary with root access to a device, given firmware is one of the lowest programming abstraction layers.”]
Source: https://collaborate.mitre.org/attackics/index.php/Technique/T0857