STIGQter STIGQter: STIG Summary: VMware vSphere 7.0 Virtual Machine Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 30 Jan 2025:

Unauthorized floppy devices must be disconnected on the virtual machine (VM).

DISA Rule

SV-256457r959010_rule

Vulnerability Number

V-256457

Group Title

SRG-OS-000480-VMM-002000

Rule Version

VMCH-70-000008

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Floppy drives are no longer visible through the vSphere Client and must be done via the API or PowerCLI.

From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:

Get-VM "VM Name" | Get-FloppyDrive | Remove-FloppyDrive

Note: The VM must be powered off to remove the floppy drive.

Check Contents

Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.

From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:

Get-VM | Get-FloppyDrive | Select Parent, Name, ConnectionState

If a virtual machine has a floppy drive connected, this is a finding.

Vulnerability Number

V-256457

Documentable

False

Rule Version

VMCH-70-000008

Severity Override Guidance

Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.

From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:

Get-VM | Get-FloppyDrive | Select Parent, Name, ConnectionState

If a virtual machine has a floppy drive connected, this is a finding.

Check Content Reference

M

Target Key

5519