NIST SP 800-53 rev5 · Media Protection
MP-7 Media Use
Mitigates 6 ATT&CK techniques, used by 2 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Weaknesses it helps against
Through the techniques typically used to exploit them (CTID, CISA KEV).
- CWE-1251 techniquesOut-of-bounds ReadCode reads beyond a buffer, leaking secrets such as keys or memory addresses that defeat other defences.
- CWE-1901 techniquesInteger Overflow or WraparoundA number grows past its maximum and wraps around, so a size check passes when it shouldn't.
- CWE-1911 techniquesInteger Underflow (Wrap or Wraparound)A subtraction goes below zero and wraps to a huge value, typically leading to an oversized copy.
- CWE-4001 techniquesUncontrolled Resource ConsumptionRequests can consume unbounded CPU, memory or connections, taking the service down.
- CWE-7701 techniquesAllocation of Resources Without Limits or ThrottlingNothing limits how much an attacker can make the system allocate.
- CWE-7871 techniquesOut-of-bounds WriteData is written outside the memory it belongs to; the most common root cause of exploited memory bugs.
Techniques it mitigates
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.