STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide Version: 1 Release: 3 Benchmark Date: 01 Oct 2025:

The Enterprise Voice, Video, and Messaging Endpoint must be configured to prevent the configuration or display of configuration settings without the use of a PIN or password.

DISA Rule

SV-259941r1117235_rule

Vulnerability Number

V-259941

Group Title

SRG-NET-000015

Rule Version

SRG-NET-000015-VVEP-00101

Severity

CAT II

CCI(s)

• CCI-000213 - Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

10

Fix Recommendation

Configure the Enterprise Voice, Video, and Messaging Endpoint to prevent the configuration or display of configuration settings without the use of a PIN or password.

Check Contents

Verify the Enterprise Voice, Video, and Messaging Endpoint is configured to prevent the configuration or display of configuration settings without the use of a PIN or password.

If the Enterprise Voice, Video, and Messaging Endpoint does not prevent the configuration or display of configuration settings without the use of a PIN or password, this is a finding.

Vulnerability Number

V-259941

Documentable

False

Rule Version

SRG-NET-000015-VVEP-00101

Severity Override Guidance

Verify the Enterprise Voice, Video, and Messaging Endpoint is configured to prevent the configuration or display of configuration settings without the use of a PIN or password.

If the Enterprise Voice, Video, and Messaging Endpoint does not prevent the configuration or display of configuration settings without the use of a PIN or password, this is a finding.

Check Content Reference

M

Target Key

5586