NIST 800-53 r5 · Controls catalogue · Family PE
PE-4Access Control for Transmission
Control physical access to {{ insert: param, pe-04_odp.01 }} within organizational facilities using {{ insert: param, pe-04_odp.02 }}.
Last updated: 04 July 2026 08:17 UTC
Cumulative inbound coverage
How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.
Collective: mostly · 1 mapping(s) from 1 framework(s): CSF 2.0 1 (mostly)
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (5)AI
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-284 | Improper Access Control | 5,385 | Enforces physical-layer access control on transmission resources, reducing the ability to reach or manipulate them outside intended boundaries. |
CWE-668 | Exposure of Resource to Wrong Sphere | 798 | Prevents transmission resources from being exposed to an unauthorized physical sphere by limiting who can approach distribution lines. |
CWE-923 | Improper Restriction of Communication Channel to Intended Endpoints | 61 | Limits physical connectivity to transmission channels, supporting restriction of communication paths to only intended endpoints. |
CWE-300 | Channel Accessible by Non-Endpoint | 54 | Physically restricts transmission channels so they cannot be accessed or tapped by non-endpoint actors within facilities. |
CWE-1263 | Improper Physical Access Control | 13 | Directly implements physical access restrictions to transmission lines and media, preventing unauthorized physical tampering or interception. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2022-21490 | 8.0 | 6.3 | 0.7867 | good |
CVE-2022-21550 | 8.0 | 6.3 | 0.5070 | good |
CVE-2022-21279 | 8.0 | 6.3 | 0.7895 | good |
CVE-2022-21489 | 8.0 | 6.3 | 0.7885 | good |
CVE-2022-21280 | 8.0 | 6.3 | 0.7655 | good |
CVE-2026-21982 | 5.5 | 7.5 | 0.0023 | good |
CVE-2024-42181 | 1.5 | 1.6 | 0.0017 | partial |