Threat H.L.CHS-iP.3.1

URI: H.L.CHS-iP.3.1

Package: Network

< prev | next >

Description: Console access to unprotected guest account on host Host in Space: an attacker with access to the physical space Space where the device is located uses console access to log in to a guest account.

Threat Type: Primary Threat

Matching Pattern:

H.L.CHS-iP.3.1
MP-CHS-iP

Finds a Console Host located in a Space, with associated access contexts and optionally an interactive user and system manager, where the device is not a personal device.

        (empty)

        (empty)

        (empty)

CSG-IgnorePhysicalThreatsFromWorld

Indicates that threats from as well as to the space Space can be ignored, i.e. that the risk model intentionally does not consider physical attacks from Space. This is only permitted if Space is the inferred global public space (the World) used when no locations are asserted in the model. This control strategy is a way to specify that physical security is out of scope for devices with no explicitly specified location(s), i.e. that they are considered physically secure.

CSG-SecureHostConfig

Device Host is configured securely: passwords or other authentication are set up including resetting default passwords for all user and administrator accounts, auto-run features disabled to prevent execution without user authorisation for files from removable storage or from the internet, and unnecessary software and especially network accessible services removed or disabled.