Detections
Analytics

7.10 Virtual machines must remove unnecessary audio devices

Information

Removing unnecessary devices from virtual machines minimizes the attack surface and reduces potential pathways for data exfiltration or unauthorized data capture. This practice aligns with the principle of least functionality, ensuring that VMs have only the essential components required to perform their designated functions.

Eliminating unnecessary devices reduces attack surface and streamlines the virtual machine configuration, promoting a cleaner, more manageable, and less vulnerable setup.

Solution

To remediate this recommendation, power off the VM when required, remove unnecessary sound/audio devices from Virtual Hardware, and validate the guest application after the change. Document any approved exception.

Impact:

Careful analysis and understanding of the virtual machine's requirements and dependencies are crucial before implementing this security control to avoid unintended disruptions or degradation of service.

See Also

https://workbench.cisecurity.org/benchmarks/26357

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: VMware

Control ID: cfb0a6c81c24668d77724bd50a3a788289b86d5125673a54225e7d5b32abd3c2