STIGQter: STIG Summary: RUCKUS ICX NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

Security-relevant firmware updates must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

DISA Rule

SV-273830r1110848_rule

Vulnerability Number

V-273830

Group Title

SRG-APP-000457-NDM-000352

Rule Version

RCKS-NDM-000800

Severity

CAT II

CCI(s)

• CCI-002605 - Install security-relevant software updates within an organization-defined time period of the release of the updates.

Weight

10

Fix Recommendation

Institute and adhere to policies and procedures to ensure that patches are consistently applied to the network device within the time allowed.

Check Contents

Obtain evidence that firmware updates are consistently applied to the network device within the time frame defined for each patch.

If such evidence cannot be obtained, or the evidence that is obtained indicates a pattern of noncompliance, this is a finding.

If the network device does not install security-relevant updates within the time period directed by the authoritative source, this is a finding.

Vulnerability Number

V-273830

Documentable

False

Rule Version

RCKS-NDM-000800

Severity Override Guidance

Obtain evidence that firmware updates are consistently applied to the network device within the time frame defined for each patch.

If such evidence cannot be obtained, or the evidence that is obtained indicates a pattern of noncompliance, this is a finding.

If the network device does not install security-relevant updates within the time period directed by the authoritative source, this is a finding.

Check Content Reference

M

Target Key

5695