Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-206797 | SRG-NET-000512-VVEP-00050 | SV-206797r604140_rule | Medium |
Description |
---|
A Voice Video Endpoint set to automatically answer a call with audio or video capabilities enabled risks transmitting information not intended for the caller. In the event a Voice Video Endpoint automatically answered a call during a classified meeting or discussion. Potentially sensitive or classified information could be transmitted. The auto-answer feature must not be activated by a user unless the feature is required to satisfy mission requirements. |
STIG | Date |
---|---|
Voice Video Endpoint Security Requirements Guide | 2020-12-04 |
Check Text ( C-7053r363914_chk ) |
---|
Verify the Voice Video Endpoint auto-answer feature is disabled. If the Voice Video Endpoint auto-answer feature is not disabled, this is a finding. |
Fix Text (F-7053r363915_fix) |
---|
Configure the Voice Video Endpoint auto-answer feature to be disabled. |