STIGQter: STIG Summary: HPE Alletra Storage ArcusOS Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

The HPE Alletra Storage ArcusOS device must install security-relevant firmware updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs).

DISA Rule

SV-283414r1194936_rule

Vulnerability Number

V-283414

Group Title

SRG-APP-000457-NDM-000352

Rule Version

ASMP-ND-000900

Severity

CAT II

CCI(s)

• CCI-002605 - Install security-relevant software updates within an organization-defined time period of the release of the updates.

Weight

10

Fix Recommendation

Install the latest approved update through the web UI.

1. Select "system" from left navigation pane.
2. Select "software" from main navigation pane.
3. Select "Load an update package" from the Actions pane.
4. Choose a file location from which to upload.
5. Return to the software screen and select "Update software" from the Actions pane.
6. Verify the version selected for update is listed/selected, and then click "Install".

Check Contents

Verify software updates are consistently applied to the HPE Alletra Storage ArcusOS device within the time frame defined for each patch.

Check the software version:
cli% showversion
Release version 10.3.0

Component Name Version
CLI Server 10.3.0
CLI Client 10.3.0
System Manager 10.3.0
Kernel 10.3.0
IO Stack 10.3.0
Drive Firmware 10.3.0
Enclosure Firmware 10.3.0
Upgrade Tool 61 (231107)

If the HPE Alletra Storage ArcusOS device does not have security-relevant updates installed within the time period directed by the authoritative source, this is a finding.

Vulnerability Number

V-283414

Documentable

False

Rule Version

ASMP-ND-000900

Severity Override Guidance

Verify software updates are consistently applied to the HPE Alletra Storage ArcusOS device within the time frame defined for each patch.

Check the software version:
cli% showversion
Release version 10.3.0

Component Name Version
CLI Server 10.3.0
CLI Client 10.3.0
System Manager 10.3.0
Kernel 10.3.0
IO Stack 10.3.0
Drive Firmware 10.3.0
Enclosure Firmware 10.3.0
Upgrade Tool 61 (231107)

If the HPE Alletra Storage ArcusOS device does not have security-relevant updates installed within the time period directed by the authoritative source, this is a finding.

Check Content Reference

M

Target Key

5742