STIGQter: STIG Summary: Virtual Machine Manager Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

All interactions between guest VMs and external systems, via other interface devices, must be mediated by the VMM or its service VMs.

DISA Rule

SV-207417r1138004_rule

Vulnerability Number

V-207417

Group Title

SRG-OS-000242

Rule Version

SRG-OS-000242-VMM-000850

Severity

CAT II

CCI(s)

• CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Configure all interactions between guest VMs and external systems, via other interface devices, are mediated by the VMM or its service VMs.

Check Contents

Verify all interactions between guest VMs and external systems, via other interface devices, are mediated by the VMM or its service VMs.

If they are not, this is a finding.

Vulnerability Number

V-207417

Documentable

False

Rule Version

SRG-OS-000242-VMM-000850

Severity Override Guidance

Verify all interactions between guest VMs and external systems, via other interface devices, are mediated by the VMM or its service VMs.

If they are not, this is a finding.

Check Content Reference

M

Target Key

2924