Specify which LOGG-* mitigations are requiremed (a78db5b2) · Commits · STAN4CRA / EN 304 620 Virtual Private Networks Part 1

EN-304-620-1.md

+11 −11

Original line number	Diff line number	Diff line
		@@ -722,9 +722,9 @@ Mitigations for Likelihood:

		Mitigations for Impact:

		* Medium to Low: NPII-1, LOGG
		* Medium to Low: NPII-1, LOGG-1

		* High to Low: NPII-\*, LOGG
		* High to Low: NPII-\, LOGG-\

		### C.4.x TH-KEVU: Known exploitable vulnerabilities

		@@ -836,9 +836,9 @@ Mitigations for Likelihood:

		Mitigations for Impact:

		* Medium to Low: LOGG
		* Medium to Low: LOGG-1

		* High to Low: LOGG, NPII-2
		* High to Low: LOGG-\*, NPII-2

		### C.4.x TH-LEAK: Attacker reads sensitive data sent outside the VPN connection by the product.

		@@ -864,9 +864,9 @@ Mitigations for Likelihood:

		Mitigations for Impact:

		* Medium to Low: NPII-1, LOGG
		* Medium to Low: NPII-1, LOGG-1

		* High to Low: NPII-\*, NPII- LOGG
		* High to Low: NPII-\, LOGG-\

		### C.4.x TH-PLAN: Transmitting data in the clear

		@@ -938,19 +938,19 @@ Mitigations for Impact:
		\| all others \| Medium \| SP-2, SP-4 \|
		\| DAT = 0 & FUN = 0 \| Low \| SP-1 \|

		Requirements that mitigate this threat: LOGG-\*
		Requirements that mitigate this threat: LOGG

		Mitigations for Likelihood:

		* Medium to Low: LOGG-\*
		* Medium to Low: LOGG-1

		* High to Medium: LOGG-\*
		* High to Medium: LOGG-1, LOGG-2

		Mitigations for Impact:

		* Medium to Low: LOGG-\*
		* Medium to Low: NPII-1

		* High to Medium: LOGG-\*
		* High to Low: NPII-\*

		### C.4.x TH-XXXX: _Short description_