Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6705 | KVM03.001.00 | SV-6900r2_rule | DCBP-1 | High |
Description |
---|
If a network attached KVM switch is attached to an out-of-band network there is less opportunity for a malicious user to compromise the interface and create a denial of service by issuing disruptive commands to a server. The ISSO or SA will ensure a network attached KVM switch used to administer ISs is connected to an out-of-band network. |
STIG | Date |
---|---|
Keyboard Video and Mouse Switch STIG | 2015-12-09 |
Check Text ( C-2709r2_chk ) |
---|
The reviewer will interview the ISSO or SA to verify that a network attached KVM switch used to administer ISs is connected to an out of band network. If a network attached KVM used to administer ISs is not connected to an out-of-band network, this is a finding. |
Fix Text (F-6310r2_fix) |
---|
Develop a plan that will attach all network attached KVM switches used to administer ISs to an out-of-band network. Obtain CM approval and implement the plan. |