CVE-2023-4885

Ensures only authenticated endpoints can access the communication channel, blocking unauthorized non-endpoint access.

Physically restricts transmission channels so they cannot be accessed or tapped by non-endpoint actors within facilities.

Periodic TSCM surveys identify unauthorized access points or taps that make communication channels reachable by non-endpoint adversaries.

Explicitly isolates the communications path so it cannot be accessed or intercepted by non-endpoint entities during security functions.

Restrictions and channel controls reduce the chance that VoIP media or signaling streams remain accessible to non-participants.

Directly prevents non-endpoint access or interception of the session communication path.

An out-of-band channel is inaccessible to non-endpoints that can observe or interfere with the primary communication channel.

The control restricts an inherently broadcast wireless channel to only intended endpoints, mitigating accessibility by non-endpoints.

A.5.14 mandates rules/procedures/agreements (incl. recipient auth, crypto per 8.24, stronger auth on public nets, anti-interception/unauth-access controls) that stop non-endpoint actors from accessing/influencing the channel for most transfer forms; remainder (e.g. some verbal transfer, misrouting not caught by auth) is nameable.

Network security controls directly address channel integrity and endpoint authentication.

Security of network services includes measures to verify endpoints and protect channel integrity.

Cryptography provides channel integrity and can support endpoint authentication.

Secure authentication mechanisms verify actor identity at both ends of the channel.