@@ -136,7 +136,7 @@ The following referenced documents may be useful in implementing an ETSI deliver
<spanid="_ref_i.6"></span><aname="_ref_i.6">[i.6]</a> prEN 40000-1-3: "Cybersecurity requirements for products with digital elements – Part 1-3: Vulnerability handling“
<spanid="_ref_i.7"></span><aname="_ref_i.6">[i.7]</a> prEN 40000-1-4: "Cybersecurity requirements for products with digital elements – Part 1-4: Security controls – Generic security requirements”
<spanid="_ref_i.7"></span><aname="_ref_i.7">[i.7]</a> prEN 40000-1-4: "Cybersecurity requirements for products with digital elements – Part 1-4: Security controls – Generic security requirements”
<mark>Below this line are reference, that needs to be checked, if needed still.</mark>
@@ -1529,7 +1529,9 @@ Management traffic in this context refers to command and control instructions th
**Medium**:
***IM_SEGMENT-2** Available management APIs shall accept traffic only from reasonably limited known sources like RFC1918 subnet.
***IM_SEGMENT-2** Available management APIs shall accept traffic only from reasonably limited known sources.
> EXAMPLE: A limited known source would be RFC 1918 private subnet.