Loading EN-304-624.md +60 −3 Original line number Diff line number Diff line Loading @@ -3309,13 +3309,70 @@ The risk are then calculated and their applicability defined using the matrixes <tr> <td>T_STA01</td> <td>Modifying certificate revocation statuses in unprotected certificate status data</td> <td>STA01s</td> <td>Integrity, Availability</td> <td>AVA-2, INT-2</td> <td>AVA-1, INT-1</td> <td>AVA-1, INT-0</td> <td>NA</td> <td></td> <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td> <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td> <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-0</td> <td>NA</td> <td>Low</td> <td>High</td> <td>High</td> <td>NA</td> <td>UC2, UC3</td> </tr> <tr> <td>T_STA02</td> <td>Accessing certificate revocation statuses via an unprotected certificate status management function</td> <td>STA11 \ PKI Services</td> <td>Integrity, Availability</td> <td>AVA-2, INT-0, TRA-2</td> <td>AVA-1, INT-0, TRA-1</td> <td>AVA-1, INT-0, TRA-0</td> <td>NA</td> <td></td> <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td> <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td> <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-0</td> <td>NA</td> <td>High</td> <td>High</td> <td>High</td> <td>NA</td> <td>UC1, UC2, UC3</td> </tr> <tr> <td>T_MITM</td> <td>A Remote attacker may exploit interactions between the TOE and the ITS-S to expose or tamper sensitive TOE or user data</td> <td>Keys <br> Certificates <br> Station registration data <br> Trust lists <br> Misbehaviour detection </td> <td>Integrity, Availability, Confidentiality</td> <td>NA</td> <td>NA</td> <td>NA</td> <td>AVA-0, INT-0, CON-0</td> <td></td> <td>NA</td> <td>NA</td> <td>NA</td> <td>DEP-1, NET-2, USR-2, OPS-2, IF-0/td> <td>NA</td> <td>NA</td> <td>NA</td> <td>High</td> <td>UC4</td> </tr> </Table> </div> Loading Loading
EN-304-624.md +60 −3 Original line number Diff line number Diff line Loading @@ -3309,13 +3309,70 @@ The risk are then calculated and their applicability defined using the matrixes <tr> <td>T_STA01</td> <td>Modifying certificate revocation statuses in unprotected certificate status data</td> <td>STA01s</td> <td>Integrity, Availability</td> <td>AVA-2, INT-2</td> <td>AVA-1, INT-1</td> <td>AVA-1, INT-0</td> <td>NA</td> <td></td> <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td> <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td> <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-0</td> <td>NA</td> <td>Low</td> <td>High</td> <td>High</td> <td>NA</td> <td>UC2, UC3</td> </tr> <tr> <td>T_STA02</td> <td>Accessing certificate revocation statuses via an unprotected certificate status management function</td> <td>STA11 \ PKI Services</td> <td>Integrity, Availability</td> <td>AVA-2, INT-0, TRA-2</td> <td>AVA-1, INT-0, TRA-1</td> <td>AVA-1, INT-0, TRA-0</td> <td>NA</td> <td></td> <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td> <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td> <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-0</td> <td>NA</td> <td>High</td> <td>High</td> <td>High</td> <td>NA</td> <td>UC1, UC2, UC3</td> </tr> <tr> <td>T_MITM</td> <td>A Remote attacker may exploit interactions between the TOE and the ITS-S to expose or tamper sensitive TOE or user data</td> <td>Keys <br> Certificates <br> Station registration data <br> Trust lists <br> Misbehaviour detection </td> <td>Integrity, Availability, Confidentiality</td> <td>NA</td> <td>NA</td> <td>NA</td> <td>AVA-0, INT-0, CON-0</td> <td></td> <td>NA</td> <td>NA</td> <td>NA</td> <td>DEP-1, NET-2, USR-2, OPS-2, IF-0/td> <td>NA</td> <td>NA</td> <td>NA</td> <td>High</td> <td>UC4</td> </tr> </Table> </div> Loading