Loading EN-304-626.md +26 −26 Original line number Diff line number Diff line Loading @@ -2043,10 +2043,10 @@ Attacker may use known exploitable vulnerabilities in the product implementation | max(PHY, SFT, NET) = 2 & COM = 2 & ADM = 2 | High | WL-2, WL-3, VI-2 | | Risk factors | Impact | Security profiles | |-----------------------------|--------|------------------------------------| | max(SDS, SDT, FUN) = 0 | Low | none | | max(SDS, SDT, FUN) = 1 | Medium | WD-1, WD-3, WL-1, VI-1 | | max(SDS, SDT, FUN) = 2 | High | WD-2, WD-4, WL-2, WL-3, WL-4, VI-2 | |---------------------------|--------|------------------------------------| | max(SNDS, SNDT, SENF) = 0 | Low | none | | max(SNDS, SNDT, SENF) = 1 | Medium | WD-1, WD-3, WL-1, VI-1 | | max(SNDS, SNDT, SENF) = 2 | High | WD-2, WD-4, WL-2, WL-3, WL-4, VI-2 | Requirements that mitigate this threat: NKEV, SSDD, LMII, SCUD, DMIN, LMAS, LOGG, VULH Loading @@ -2069,10 +2069,10 @@ Attacker may use configuration errors to get unauthorized access to the product | max(PHY, SFT, NET) = 2 & ADM = 2 | High | WD-3, WL-2, WL-3, VI-2 | | Risk factors | Impact | Security profiles | |----------------------------------|--------|------------------------| | max(SDS, SDT, FUN) = 0 | Low | none | | max(SDS, SDT, FUN) = 1 | Medium | WD-1, WD-3, VI-1 | | max(SDS, SDT, FUN) = 2 | High | WD-2, WD-4, WL-\* VI-2 | |---------------------------|--------|------------------------| | max(SNDS, SNDT, SENF) = 0 | Low | none | | max(SNDS, SNDT, SENF) = 1 | Medium | WD-1, WD-3, VI-1 | | max(SNDS, SNDT, SENF) = 2 | High | WD-2, WD-4, WL-\* VI-2 | Requirements that mitigate this threat: CDST, SDEF, DMIN, LOGG Loading Loading @@ -2100,9 +2100,9 @@ Attacker may use network access to get unauthorized access to confidential data | Risk factors | Impact | Security profiles | |--------------|--------|--------------------| | SDT = 0 | Low | none | | SDT = 1 | Medium | WD-\*, WL-\*, VI-1 | | SDT = 2 | High | VI-2 | | SNDT = 0 | Low | none | | SNDT = 1 | Medium | WD-\*, WL-\*, VI-1 | | SNDT = 2 | High | VI-2 | Requirements that mitigate this threat: CDTX, IDTX, DMIN Loading @@ -2129,10 +2129,10 @@ Attacker may exploit vulnerabilities in the product to reduce availability of pr | max(PHY, SFT, NET) = 2 & COM = 2 & ADM = 2 | High | WL-2, WL-3, VI-2 | | Risk factors | Impact | Security profiles | |------------------------|--------|-------------------------| | max(SDS, SDT, FUN) = 0 | Low | none | | max(SDS, SDT, FUN) = 1 | Medium | WD-1, WD-3, WL-\*, VI-1 | | max(SDS, SDT, FUN) = 2 | High | WD-2, WD-4, VI-2 | |---------------------------|--------|-------------------------| | max(SNDS, SNDT, SENF) = 0 | Low | none | | max(SNDS, SNDT, SENF) = 1 | Medium | WD-1, WD-3, WL-\*, VI-1 | | max(SNDS, SNDT, SENF) = 2 | High | WD-2, WD-4, VI-2 | Requirements that mitigate this threat: NKEV, AVAI, LMII, LMAS, LOGG, VULH Loading @@ -2156,9 +2156,9 @@ Attacker may use host system or network access for a denial-of-service attack on | Risk factors | Impact | Security profiles | |--------------|--------|-------------------------| | FUN = 0 | Low | none | | FUN = 1 | Medium | WD-1, WD-3, WL-\*, VI-1 | | FUN = 2 | High | WD-2, WD-4, VI-2 | | SENF = 0 | Low | none | | SENF = 1 | Medium | WD-1, WD-3, WL-\*, VI-1 | | SENF = 2 | High | WD-2, WD-4, VI-2 | Requirements that mitigate this threat: AUTH, AVAI, LMII, LOGG Loading Loading @@ -2213,10 +2213,10 @@ Attacker may masquerade as an authorized server to get unauthorized access to pr | NET = 2 & COM = 2 | High | WL-2, WL-3, VI-2 | | Risk factors | Impact | Security profiles | |-----------------------------|--------|------------------------| | max(SDS, SDT, FUN) = 0 | Low | none | | max(SDS, SDT, FUN) = 1 | Medium | WD-1, WD-3, VI-1 | | max(SDS, SDT, FUN) = 2 | High | WD-2, WD-4, WL-\* VI-2 | |---------------------------|--------|------------------------| | max(SNDS, SNDT, SENF) = 0 | Low | none | | max(SNDS, SNDT, SENF) = 1 | Medium | WD-1, WD-3, VI-1 | | max(SNDS, SNDT, SENF) = 2 | High | WD-2, WD-4, WL-\* VI-2 | Requirements that mitigate this threat: CDTX, IDTX, AUTH, SCUD, LOGG Loading Loading
EN-304-626.md +26 −26 Original line number Diff line number Diff line Loading @@ -2043,10 +2043,10 @@ Attacker may use known exploitable vulnerabilities in the product implementation | max(PHY, SFT, NET) = 2 & COM = 2 & ADM = 2 | High | WL-2, WL-3, VI-2 | | Risk factors | Impact | Security profiles | |-----------------------------|--------|------------------------------------| | max(SDS, SDT, FUN) = 0 | Low | none | | max(SDS, SDT, FUN) = 1 | Medium | WD-1, WD-3, WL-1, VI-1 | | max(SDS, SDT, FUN) = 2 | High | WD-2, WD-4, WL-2, WL-3, WL-4, VI-2 | |---------------------------|--------|------------------------------------| | max(SNDS, SNDT, SENF) = 0 | Low | none | | max(SNDS, SNDT, SENF) = 1 | Medium | WD-1, WD-3, WL-1, VI-1 | | max(SNDS, SNDT, SENF) = 2 | High | WD-2, WD-4, WL-2, WL-3, WL-4, VI-2 | Requirements that mitigate this threat: NKEV, SSDD, LMII, SCUD, DMIN, LMAS, LOGG, VULH Loading @@ -2069,10 +2069,10 @@ Attacker may use configuration errors to get unauthorized access to the product | max(PHY, SFT, NET) = 2 & ADM = 2 | High | WD-3, WL-2, WL-3, VI-2 | | Risk factors | Impact | Security profiles | |----------------------------------|--------|------------------------| | max(SDS, SDT, FUN) = 0 | Low | none | | max(SDS, SDT, FUN) = 1 | Medium | WD-1, WD-3, VI-1 | | max(SDS, SDT, FUN) = 2 | High | WD-2, WD-4, WL-\* VI-2 | |---------------------------|--------|------------------------| | max(SNDS, SNDT, SENF) = 0 | Low | none | | max(SNDS, SNDT, SENF) = 1 | Medium | WD-1, WD-3, VI-1 | | max(SNDS, SNDT, SENF) = 2 | High | WD-2, WD-4, WL-\* VI-2 | Requirements that mitigate this threat: CDST, SDEF, DMIN, LOGG Loading Loading @@ -2100,9 +2100,9 @@ Attacker may use network access to get unauthorized access to confidential data | Risk factors | Impact | Security profiles | |--------------|--------|--------------------| | SDT = 0 | Low | none | | SDT = 1 | Medium | WD-\*, WL-\*, VI-1 | | SDT = 2 | High | VI-2 | | SNDT = 0 | Low | none | | SNDT = 1 | Medium | WD-\*, WL-\*, VI-1 | | SNDT = 2 | High | VI-2 | Requirements that mitigate this threat: CDTX, IDTX, DMIN Loading @@ -2129,10 +2129,10 @@ Attacker may exploit vulnerabilities in the product to reduce availability of pr | max(PHY, SFT, NET) = 2 & COM = 2 & ADM = 2 | High | WL-2, WL-3, VI-2 | | Risk factors | Impact | Security profiles | |------------------------|--------|-------------------------| | max(SDS, SDT, FUN) = 0 | Low | none | | max(SDS, SDT, FUN) = 1 | Medium | WD-1, WD-3, WL-\*, VI-1 | | max(SDS, SDT, FUN) = 2 | High | WD-2, WD-4, VI-2 | |---------------------------|--------|-------------------------| | max(SNDS, SNDT, SENF) = 0 | Low | none | | max(SNDS, SNDT, SENF) = 1 | Medium | WD-1, WD-3, WL-\*, VI-1 | | max(SNDS, SNDT, SENF) = 2 | High | WD-2, WD-4, VI-2 | Requirements that mitigate this threat: NKEV, AVAI, LMII, LMAS, LOGG, VULH Loading @@ -2156,9 +2156,9 @@ Attacker may use host system or network access for a denial-of-service attack on | Risk factors | Impact | Security profiles | |--------------|--------|-------------------------| | FUN = 0 | Low | none | | FUN = 1 | Medium | WD-1, WD-3, WL-\*, VI-1 | | FUN = 2 | High | WD-2, WD-4, VI-2 | | SENF = 0 | Low | none | | SENF = 1 | Medium | WD-1, WD-3, WL-\*, VI-1 | | SENF = 2 | High | WD-2, WD-4, VI-2 | Requirements that mitigate this threat: AUTH, AVAI, LMII, LOGG Loading Loading @@ -2213,10 +2213,10 @@ Attacker may masquerade as an authorized server to get unauthorized access to pr | NET = 2 & COM = 2 | High | WL-2, WL-3, VI-2 | | Risk factors | Impact | Security profiles | |-----------------------------|--------|------------------------| | max(SDS, SDT, FUN) = 0 | Low | none | | max(SDS, SDT, FUN) = 1 | Medium | WD-1, WD-3, VI-1 | | max(SDS, SDT, FUN) = 2 | High | WD-2, WD-4, WL-\* VI-2 | |---------------------------|--------|------------------------| | max(SNDS, SNDT, SENF) = 0 | Low | none | | max(SNDS, SNDT, SENF) = 1 | Medium | WD-1, WD-3, VI-1 | | max(SNDS, SNDT, SENF) = 2 | High | WD-2, WD-4, WL-\* VI-2 | Requirements that mitigate this threat: CDTX, IDTX, AUTH, SCUD, LOGG Loading
