Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
BOOTP services must be disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-3086 | NET0750 | SV-3086r3_rule | Low |
| Description |
|---|
| BOOTP is a user datagram protocol (UDP) that can be used by Cisco routers to access copies of Cisco IOS Software on another Cisco router running the BOOTP service. In this scenario, one Cisco router acts as a Cisco IOS Software server that can download the software to other Cisco routers acting as BOOTP clients. In reality, this service is rarely used and can allow an attacker to download a copy of a router's Cisco IOS Software. |
| STIG | Date |
|---|---|
| Perimeter Router Security Technical Implementation Guide Cisco | 2017-03-09 |
Details
| Check Text ( C-3573r7_chk ) |
|---|
| Review the device configuration to determine if BOOTP services are enabled. If BOOTP is enabled, this is a finding. |
| Fix Text (F-3111r6_fix) |
|---|
| Configure the device to disable all BOOTP services. |