Loading EN-304-620-1.md +23 −7 Original line number Diff line number Diff line Loading @@ -784,15 +784,31 @@ Mitigations for Impact: ### C.4.x TH-RDP: Attacker launches denial of service attack on manufacturer remote data processing | Risk factors | Impact | |-------------------------------|--------| | max(DAT, FUN, RDP) = 2 | High | | max(DAT, FUN) = 1 and RDP < 2 | Medium | | max(DAT, FUN) = 0 | Low | | Risk factors | Likelihood | Security profiles | |-------------------------------|------------|-------------------| | RDP = 2 & DAT = 2 & FUN = 2 | High | SP-3 | | all others | Medium | SP-4 | | RDP = 0 or DAT = 0 or FUN = 0 | Low | SP-1, SP-2 | | Risk factors | Impact | Security profiles | |-------------------|--------|-------------------| | DAT = 2 & FUN = 2 | High | SP-3 | | all others | Medium | SP-2, SP-4 | | DAT = 0 & FUN = 0 | Low | SP-1 | Requirements that mitigate this threat: AVAI Mitigations for Likelihood: * Medium to Low: DOST * High to Low: DOST Mitigations for Impact: _Table C.3_ * Medium to Low: FDRP, LMEM Requirements: TODO (RDPS) * High to Low: FDRP, LMEM, FAIR ### C.4.x TH-MTM: Attacker attempts to read or modify traffic by capturing and relaying activity between endpoints Loading Loading
EN-304-620-1.md +23 −7 Original line number Diff line number Diff line Loading @@ -784,15 +784,31 @@ Mitigations for Impact: ### C.4.x TH-RDP: Attacker launches denial of service attack on manufacturer remote data processing | Risk factors | Impact | |-------------------------------|--------| | max(DAT, FUN, RDP) = 2 | High | | max(DAT, FUN) = 1 and RDP < 2 | Medium | | max(DAT, FUN) = 0 | Low | | Risk factors | Likelihood | Security profiles | |-------------------------------|------------|-------------------| | RDP = 2 & DAT = 2 & FUN = 2 | High | SP-3 | | all others | Medium | SP-4 | | RDP = 0 or DAT = 0 or FUN = 0 | Low | SP-1, SP-2 | | Risk factors | Impact | Security profiles | |-------------------|--------|-------------------| | DAT = 2 & FUN = 2 | High | SP-3 | | all others | Medium | SP-2, SP-4 | | DAT = 0 & FUN = 0 | Low | SP-1 | Requirements that mitigate this threat: AVAI Mitigations for Likelihood: * Medium to Low: DOST * High to Low: DOST Mitigations for Impact: _Table C.3_ * Medium to Low: FDRP, LMEM Requirements: TODO (RDPS) * High to Low: FDRP, LMEM, FAIR ### C.4.x TH-MTM: Attacker attempts to read or modify traffic by capturing and relaying activity between endpoints Loading