NIST 800-53 r5 · Controls catalogue · Family MP
MP-2Media Access
Restrict access to {{ insert: param, mp-2_prm_1 }} to {{ insert: param, mp-2_prm_2 }}.
Last updated: 22 August 2026 07:11 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (6)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-284 | Improper Access Control | 6,900+ | The control enforces access restrictions on media, directly mitigating improper access control weaknesses. |
CWE-732 | Incorrect Permission Assignment for Critical Resource | 1,900+ | Restricting media access ensures correct permission assignments for this critical resource. |
CWE-285 | Improper Authorization | 1,500+ | Limiting media access to authorized parties addresses improper authorization for resource access. |
CWE-668 | Exposure of Resource to Wrong Sphere | 800+ | The control prevents exposure of the media resource to the wrong security sphere. |
CWE-552 | Files or Directories Accessible to External Parties | 500+ | Media access restrictions prevent files or directories from being accessible to external parties. |
CWE-1263 | Improper Physical Access Control | 13 | Restricting access to media directly implements controls to prevent improper physical access to storage media. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2020-36899 | 6.0 | 7.5 | 0.0094 | good |
CVE-2024-12330 UPD | 5.9 | 7.5 | 0.0051 | good |
CVE-2024-56462 UPD | 5.4 | 7.2 | 0.0046 | good |
CVE-2025-3773 UPD | 4.1 | 5.5 | 0.0012 | good |
CVE-2024-3124 UPD | 2.3 | 2.4 | 0.0028 | good |
CVE-2024-3128 UPD | 2.3 | 2.4 | 0.0027 | good |
CVE-2024-3430 UPD | 2.2 | 2.4 | 0.0022 | good |
CVE-2024-2364 UPD | 1.9 | 1.8 | 0.0033 | good |
CVE-2024-2567 UPD | 1.8 | 1.8 | 0.0021 | good |
CVE-2026-2974 UPD | 2.1 | 2.5 | 0.0010 | good |
CVE-2026-13514 | 2.1 | 2.4 | 0.0013 | good |