STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide Version: 1 Release: 3 Benchmark Date: 01 Oct 2025:

The Enterprise Voice, Video, and Messaging Endpoint, when using passwords or PINs for authentication or authorization, must be configured to cryptographically protect the PIN or password.

DISA Rule

SV-259974r948889_rule

Vulnerability Number

V-259974

Group Title

SRG-NET-000400

Rule Version

SRG-NET-000400-VVEP-00033

Severity

CAT I

CCI(s)

• CCI-000197 - For password-based authentication, transmit passwords only cryptographically-protected channels.

Weight

10

Fix Recommendation

Configure the Enterprise Voice, Video, and Messaging Endpoint, when using passwords or PINs for authentication or authorization, to cryptographically protect the transmission.

Check Contents

Verify the Enterprise Voice, Video, and Messaging Endpoint, when using passwords or PINs for authentication or authorization, cryptographically protects the transmission.

If the Enterprise Voice, Video, and Messaging Endpoint, when using passwords or PINs for authentication or authorization, does not cryptographically protect the transmission, this is a finding.

Vulnerability Number

V-259974

Documentable

False

Rule Version

SRG-NET-000400-VVEP-00033

Severity Override Guidance

Verify the Enterprise Voice, Video, and Messaging Endpoint, when using passwords or PINs for authentication or authorization, cryptographically protects the transmission.

If the Enterprise Voice, Video, and Messaging Endpoint, when using passwords or PINs for authentication or authorization, does not cryptographically protect the transmission, this is a finding.

Check Content Reference

M

Target Key

5586