UCF STIG Viewer Logo

The hardware Voice Video Endpoint must prevent the display of network IP settings without the use of a PIN or password.


Overview

Finding ID Version Rule ID IA Controls Severity
V-206801 SRG-NET-000512-VVEP-00054 SV-206801r604140_rule Medium
Description
Many Voice Video Endpoints can set or display configuration settings in the instrument itself. This presents a risk if a user obtains information such as the IP addresses and URLs of system components. This obtained information could be used to facilitate an attack on the system. Therefore these devices should be considered a target to be defended against such individuals that would collect voice network information for illicit purposes. To mitigate information gathering by the adversaries, measures must be taken to protect this information.
STIG Date
Voice Video Endpoint Security Requirements Guide 2020-12-04

Details

Check Text ( C-7057r363926_chk )
If the Voice Video Endpoint is not a hardware endpoint, this check procedure is Not Applicable.

Verify the hardware Voice Video Endpoint prevents the display of network IP settings without the use of a PIN or password.

If the hardware Voice Video Endpoint does not prevent the display of network IP settings without the use of a PIN or password, this is a finding.
Fix Text (F-7057r363927_fix)
Configure the hardware Voice Video Endpoint to prevent the display of network IP settings without the use of a PIN or password.