Commit 5d3c4471 authored by Valerie Aurora's avatar Valerie Aurora
Browse files

Add NUTI-1 and NUTI-2 to mitigation sets for SP-3 and SP-4

parent f8aa68bc

EN-304-620-1.md

+2 −2
Original line number Diff line number Diff line
@@ -688,13 +688,13 @@ Attacker may use unknown exploitable vulnerabilities in the product implementati 
| max(DAT, FUN, COM) > 0 | High   | SP-2, SP-3, SP-4  |

| all others             | Medium | SP-1              |



Requirements that mitigate this threat: SSDD, NPII, LOGG

Requirements that mitigate this threat: SSDD, NUTI, NPII, LOGG



Mitigations for Likelihood:



* Medium to Low: SSCA, SCFS



* High to Low: SSCA, (FZ95 or BTIN or IMSL), SCFS

* High to Low: SSCA, (FZ95 or BTIN or IMSL), SCFS, NUTI-\*



Mitigations for Impact:

clauses/5.Requirements.md

+4 −0
Original line number Diff line number Diff line
@@ -1215,6 +1215,8 @@ This clause lists all the mitigations necessary to meet requirements for each se 
  1. NPII-2

  1. NPII-3

  1. NPII-4

  1. NUTI-1

  1. NUTI-2

  1. ROUT-1

  1. ROUT-2

  1. ROUT-3
@@ -1260,6 +1262,8 @@ This clause lists all the mitigations necessary to meet requirements for each se 
  1. LOGG-1

  1. LOGG-2

  1. NPII-1

  1. NUTI-1

  1. NUTI-2

  1. ROUT-1

  1. ROUT-2

  1. ROUT-3