NP-200 system security design review

NimbusPump NP-200 Program · candidate AREV-0004 vs effective baseline DRB-0007

PRJ-2026-0042-DRV-0001Threat review

Threat workbench

STRIDE register for candidate AREV-0004; a row opens the threat record.

Context: element AE-000047 (Maintenance diagnostic service)


Unauthenticated serial service port grants privileged shellTV-000101Elevation of privilege	High	Closed	Noor Haddad	High
Maintenance actor alters or truncates pump audit logTV-000127RepudiationTampering	Medium	Treatment planned	Noor Haddad	High
Maintenance mode left enabled exposes diagnostic shellTV-000135Elevation of privilege	Medium	Assessed	Noor Haddad	Medium

Unauthenticated serial service port grants privileged shellTV-000101Elevation of privilege
HighClosed
Owner
Noor Haddad
Maintenance actor alters or truncates pump audit logTV-000127RepudiationTampering
MediumTreatment planned
Owner
Noor Haddad
Maintenance mode left enabled exposes diagnostic shellTV-000135Elevation of privilege
MediumAssessed
Owner
Noor Haddad

3 threats