NIST 800-53 r5 · Controls catalogue · Family SC
SC-10Network Disconnect
Terminate the network connection associated with a communications session at the end of the session or after {{ insert: param, sc-10_odp }} of inactivity.
Last updated: 20 August 2026 13:14 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (5)
Weaknesses this control addresses (5)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-400 | Uncontrolled Resource Consumption | 3,800+ | Terminating idle connections bounds resource consumption that would otherwise allow uncontrolled accumulation of open sessions. |
CWE-770 | Allocation of Resources Without Limits or Throttling | 2,400+ | Imposes an inactivity-based limit on network resource allocation, throttling the number of concurrently held connections. |
CWE-404 | Improper Resource Shutdown or Release | 800+ | Mandates explicit shutdown of the network connection at session conclusion, directly addressing improper resource release. |
CWE-613 | Insufficient Session Expiration | 600+ | Directly enforces termination of network sessions after inactivity or end-of-session, preventing indefinite session lifetime. |
CWE-772 | Missing Release of Resource after Effective Lifetime | 500+ | Ensures network resources are released once the session ends or becomes inactive, closing the window for missing-release weaknesses. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2024-8061 UPD | 5.9 | 7.5 | 0.0046 | partial |
CVE-2024-8062 | 5.9 | 7.5 | 0.0046 | partial |
CVE-2024-12777 UPD | 4.7 | 5.9 | 0.0046 | partial |
CVE-2025-4656 UPD | 2.7 | 3.1 | 0.0023 | partial |