NIST 800-53 r5 · Controls catalogue · Family SC
SC-6Resource Availability
Protect the availability of resources by allocating {{ insert: param, sc-06_odp.01 }} by {{ insert: param, sc-06_odp.02 }}.
Last updated: 20 August 2026 13:14 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (1)
- T1564.009 Resource Forking Stealth
Weaknesses this control addresses (5)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-400 | Uncontrolled Resource Consumption | 3,800+ | Directly mitigates uncontrolled consumption by enforcing allocation limits/quotas that preserve availability for legitimate use. |
CWE-770 | Allocation of Resources Without Limits or Throttling | 2,400+ | Implements the missing limits and throttling on resource allocation that this weakness describes. |
CWE-799 | Improper Control of Interaction Frequency | 76 | Allocation policies inherently restrict interaction frequency, reducing the impact of excessive requests. |
CWE-405 | Asymmetric Resource Consumption (Amplification) | 51 | Limits amplification effects by controlling how resources are allocated under high-volume or recursive load. |
CWE-410 | Insufficient Resource Pool | 21 | Ensures a managed resource pool is maintained rather than allowing exhaustion by any single consumer. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2024-2511 UPD | 7.0 | 5.9 | 0.5403 | good |
CVE-2025-0453 UPD | 6.8 | 7.5 | 0.1085 | good |
CVE-2025-27479 UPD | 6.2 | 7.5 | 0.0202 | good |
CVE-2026-34183 UPD | 6.1 | 7.5 | 0.0105 | good |
CVE-2025-2240 UPD | 6.0 | 7.5 | 0.0098 | good |
CVE-2025-41653 UPD | 5.9 | 7.5 | 0.0054 | good |
CVE-2024-27796 UPD | 5.7 | 7.8 | 0.0026 | good |
CVE-2024-7392 UPD | 5.1 | 6.5 | 0.0053 | good |
CVE-2024-48848 UPD | 5.0 | 6.5 | 0.0033 | good |
CVE-2026-8199 UPD | 5.0 | 6.5 | 0.0026 | good |
CVE-2026-13056 UPD | 5.0 | 6.5 | 0.0028 | good |
CVE-2026-58218 | 4.7 | 5.3 | 0.0110 | good |
CVE-2023-7033 UPD | 4.6 | 5.3 | 0.0085 | good |
CVE-2025-20103 UPD | 4.6 | 6.5 | 0.0016 | good |
CVE-2023-52891 UPD | 4.5 | 5.3 | 0.0046 | good |
CVE-2025-27694 UPD | 4.4 | 5.3 | 0.0041 | good |
CVE-2026-34019 UPD | 4.4 | 5.3 | 0.0029 | good |
CVE-2025-13945 | 4.2 | 5.5 | 0.0015 | good |
CVE-2026-6533 | 4.1 | 5.5 | 0.0015 | good |
CVE-2026-6869 | 4.1 | 5.5 | 0.0013 | good |
CVE-2026-6535 | 4.1 | 5.5 | 0.0014 | good |
CVE-2026-6867 | 4.1 | 5.5 | 0.0012 | good |
CVE-2025-12986 UPD | 3.5 | 6.0 | 0.0017 | good |
CVE-2026-24819 UPD | 3.5 | 6.3 | 0.0043 | good |
CVE-2026-0438 UPD | 3.5 | 5.4 | 0.0014 | partial |