NIST 800-53 r5 · Controls catalogue · Family MA
MA-4Nonlocal Maintenance
Approve and monitor nonlocal maintenance and diagnostic activities; Allow the use of nonlocal maintenance and diagnostic tools only as consistent with organizational policy and documented in the security plan for the system; Employ strong authentication in the establishment of nonlocal maintenance and diagnostic sessions; Maintain records for nonlocal maintenance and diagnostic activities; and Terminate session and network connections when nonlocal maintenance is completed.
Last updated: 04 July 2026 00:28 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (5)AI
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-284 | Improper Access Control | 5,367 | Approving and monitoring nonlocal maintenance per policy enforces access control over remote diagnostic activities. |
CWE-287 | Improper Authentication | 4,908 | Requiring strong authentication for establishing nonlocal maintenance sessions directly mitigates improper authentication. |
CWE-306 | Missing Authentication for Critical Function | 2,820 | Mandating authentication for nonlocal maintenance addresses missing authentication for this critical function. |
CWE-613 | Insufficient Session Expiration | 642 | Terminating sessions and network connections upon completion prevents insufficient session expiration. |
CWE-778 | Insufficient Logging | 25 | Maintaining records of nonlocal maintenance activities ensures logging to support detection of issues. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2026-25775 UPD | 7.0 | 9.8 | 0.0040 | good |
CVE-2026-33892 | 5.5 | 7.1 | 0.0021 | good |
CVE-2025-13914 | 5.5 | 8.7 | 0.0028 | good |
CVE-2026-32838 | 5.5 | 7.5 | 0.0014 | good |