NIST SP 800-53 rev5 · System and Communications Protection
SC-4 Information in Shared System Resources
Mitigates 29 ATT&CK techniques, used by 10 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Weaknesses it helps against
Through the techniques typically used to exploit them (CTID, CISA KEV).
- CWE-7982 techniquesUse of Hard-coded CredentialsA password or key is baked into the product, identical on every install and easy to find.
- CWE-221 techniquesImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Sequences like ../ in a file path escape the intended folder, exposing or overwriting other files.
- CWE-231 techniquesRelative Path TraversalRelative ../ segments in input climb out of the allowed directory.
- CWE-361 techniquesAbsolute Path TraversalAn absolute path in input points straight at a file outside the allowed directory.
Techniques it mitigates
- T1119Automated Collection71 users
- T1552.001Unsecured Credentials: Credentials In Files41 users
- T1070Indicator Removal31 users
- T1040Network Sniffing25 users
- T1552.004Unsecured Credentials: Private Keys22 users
- T1080Taint Shared Content12 users
- T1530Data from Cloud Storage10 users
- T1552.002Unsecured Credentials: Credentials in Registry10 users
- T1558.003Steal or Forge Kerberos Tickets: Kerberoasting10 users
- T1557Adversary-in-the-Middle8 users
- T1552Unsecured Credentials6 users
- T1565.002Data Manipulation: Transmitted Data Manipulation5 users
- T1070.008Indicator Removal: Clear Mailbox Data4 users
- T1558.002Steal or Forge Kerberos Tickets: Silver Ticket4 users
- T1565.001Data Manipulation: Stored Data Manipulation3 users
- T1557.002Adversary-in-the-Middle: ARP Cache Poisoning2 users
- T1564.009Hide Artifacts: Resource Forking2 users
- T1565Data Manipulation2 users
- T1595.003Active Scanning: Wordlist Scanning2 users
- T1602.002Data from Configuration Repository: Network Device Configuration Dump2 users
- T1020.001Automated Exfiltration: Traffic Duplication1 users
- T1558Steal or Forge Kerberos Tickets1 users
- T1558.004Steal or Forge Kerberos Tickets: AS-REP Roasting1 users
- T1558.005Steal or Forge Kerberos Tickets: Ccache Files1 users
- T1565.003Data Manipulation: Runtime Data Manipulation1 users
- T1602.001Data from Configuration Repository: SNMP (MIB Dump)1 users
- T1070.001T1070.0010 users
- T1070.002T1070.0020 users
- T1602Data from Configuration Repository0 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.