Detections
Analytics

AIOS-26-010950 - Apple iOS/iPadOS 18 must implement the management setting: require passcode for incoming Airplay connection requests.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

When an incoming AirPlay request is allowed without a password, it may mistakenly associate the iPhone and iPad with an AirPlay-enabled device other than the one intended (i.e., by choosing the wrong one from the AirPlay list displayed). This creates the potential for someone in control of a mistakenly associated device to obtain DOD sensitive information without authorization. Requiring a password before such an association mitigates this risk. Passwords do not require any administration and are not required to comply with any complexity requirements.

SFRID: FMT_SMF.1.1 #40

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Install a configuration profile to require that incoming AirPlay connection requests enter a password when connecting to a DOD iOS/iPadOS device.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_iOS-iPadOS_26_V1R1_STIG.zip

Item Details

References: CAT|III, CCI|CCI-000067, Rule-ID|SV-268032r1031212_rule, STIG-ID|AIOS-26-010950, Vuln-ID|V-268032

Plugin: MDM

Control ID: 64c32e7821d18e0d95595ce33b8f595b8137bcc502bffa2e6c20e4543e34bc01