Free DISA STIG and SRG Library | Vaulted

V-3086

BOOTP services must be disabled.

Finding ID
NET0750
Rule ID
SV-3086r3_rule
Severity
Cat III
CCE
(None)
Group Title
The Bootp service is not disabled.
CCI
(None)
Target Key
(None)
Documentable
No
Discussion

BOOTP is a user datagram protocol (UDP) that can be used by Cisco routers to access copies of Cisco IOS Software on another Cisco router running the BOOTP service. In this scenario, one Cisco router acts as a Cisco IOS Software server that can download the software to other Cisco routers acting as BOOTP clients. In reality, this service is rarely used and can allow an attacker to download a copy of a router's Cisco IOS Software.

Fix Text

Configure the device to disable all BOOTP services.

Check Content

Review the device configuration to determine if BOOTP services are enabled. If BOOTP is enabled, this is a finding.

Responsibility

Information Assurance Officer