The network element must be configured to disable functionality that provides the capability for automatic execution of code on mobile devices without user direction.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-33967 | SRG-NET-000073-DNS-NA | SV-44420r1_rule | Medium |
| Description |
|---|
| Auto execution vulnerabilities can result in malicious programs being executed that can be used to cause a denial of service on the device and hence disrupt network services. Examples of information system functionality that provide the capability for automatic execution of code are Auto Run and AutoPlay. Disabling capability for mobile devices is not a function of DNS. |
| STIG | Date |
|---|---|
| Domain Name System (DNS) Security Requirements Guide | 2012-10-24 |
Details
| Check Text ( C-41978r1_chk ) |
|---|
| This is not a function of DNS. |
| Fix Text (F-37882r1_fix) |
|---|
| This requirement is NA for DNS. No fix required. |