The hardware Voice Video Endpoint must prevent the configuration of network IP settings without the use of a PIN or password.

From Voice Video Endpoint Security Requirements Guide

Associated with: CCI-000366

SV-81277r1_rule The hardware Voice Video Endpoint must prevent the configuration of network IP settings without the use of a PIN or password.

Vulnerability discussion

Many Voice Video Endpoints can set or display configuration settings in the instrument itself. This presents a risk if a user obtains information such as the IP addresses and URLs of system components. This obtained information could be used to facilitate an attack on the system. Therefore these devices should be considered a target to be defended against such individuals that would collect voice network information for illicit purposes. To mitigate information gathering by the adversaries, measures must be taken to protect this information.

Check content

If the Voice Video Endpoint is not a hardware endpoint, this check procedure is Not Applicable. Verify the hardware Voice Video Endpoint prevents the configuration of network IP settings without the use of a PIN or password. If the hardware Voice Video Endpoint does not prevent the configuration of network IP settings without the use of a PIN or password, this is a finding.

Fix text

Configure the hardware Voice Video Endpoint to prevent the configuration of network IP settings without the use of a PIN or password.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.