NIST SP 800-53 rev5 · System and Services Acquisition
SA-22 Unsupported System Components
Mitigates 6 ATT&CK techniques, used by 7 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Weaknesses it helps against
Through the techniques typically used to exploit them (CTID, CISA KEV).
- CWE-1191 techniquesImproper Restriction of Operations within the Bounds of a Memory BufferCode reads or writes past the end of a buffer, the root of most classic memory-corruption exploits.
- CWE-1201 techniquesBuffer Copy without Checking Size of Input ('Classic Buffer Overflow')Input is copied into a fixed-size buffer without checking its length, overwriting whatever follows.
- CWE-1211 techniquesStack-based Buffer OverflowAn overflow on the stack can overwrite the return address and redirect the program to attacker code.
- CWE-1221 techniquesHeap-based Buffer OverflowAn overflow on the heap corrupts neighbouring objects, often turned into code execution.
- CWE-1251 techniquesOut-of-bounds ReadCode reads beyond a buffer, leaking secrets such as keys or memory addresses that defeat other defences.
- CWE-1901 techniquesInteger Overflow or WraparoundA number grows past its maximum and wraps around, so a size check passes when it shouldn't.
- CWE-1911 techniquesInteger Underflow (Wrap or Wraparound)A subtraction goes below zero and wraps to a huge value, typically leading to an oversized copy.
- CWE-201 techniquesImproper Input ValidationInput isn't checked against what the program expects; the umbrella cause behind many specific flaws.
- CWE-3461 techniquesOrigin Validation ErrorThe software doesn't verify where a message really came from, so forged messages are trusted.
- CWE-4161 techniquesUse After FreeThe program keeps using memory after releasing it, so an attacker who controls what lands there next can hijack execution.
Techniques it mitigates
- T1189Drive-by Compromise42 users
- T1543.002Create or Modify System Process: Systemd Service15 users
- T1195.002Supply Chain Compromise: Compromise Software Supply Chain12 users
- T1195.001Supply Chain Compromise: Compromise Software Dependencies and Development Tools10 users
- T1543Create or Modify System Process9 users
- T1195Supply Chain Compromise5 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.