STIGQter STIGQter: STIG Summary: VMware ESX 3 Server Version: 1 Release: 2 Benchmark Date: 22 Jul 2016: The USB usage section of the SFUG, or equivalent document, does not contain a discussion of the devices that contain persistent non-removable memory.

DISA Rule

SV-6997r1_rule

Vulnerability Number

V-6775

Group Title

USB SFUG Persistent Non-Removable Memory

Rule Version

USB01.010.00

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Develop, update, and distribute a SFUG section on USB devices that discusses devices that may contain persistent non-removable memory in accordance with the SPAN STIG.

Check Contents

The reviewer will interview the IAO and review the relevant documentation. The discussion should point out that with some devices it may not be obvious that it contains persistent non-removable memory and that, if there is a doubt, it will be treated as if it contains persistent memory.

Vulnerability Number

V-6775

Documentable

False

Rule Version

USB01.010.00

Severity Override Guidance

The reviewer will interview the IAO and review the relevant documentation. The discussion should point out that with some devices it may not be obvious that it contains persistent non-removable memory and that, if there is a doubt, it will be treated as if it contains persistent memory.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

1386

Comments