Ensure system firmware updates are installed

LowLevel 1Manual reviewaix

Description

Security vulnerabilities and functional improvements are regularly addressed through firmware updates to the system and adapter firmware. Unpatched system or adapter firmware can expose systems to known vulnerabilities that may be exploited by attackers. It is recommended that system and adadpter firmware updates be performed on enterprise assets on a regular basis.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Execute the following command to obtain details of the hardware model and firmware # /usr/sbin/lsconf 2> /dev/null | /usr/bin/grep -E "System Model|Firmware" Compare the installed firmware with the latest available from IBM FixCentral for the identified hardware model. Note: This command should only be run on an partition which has physical hardware adaptors assigned to it. e.g. a partition configured as VIOS.

How it is fixed

Fix method: Guidance or infrastructure patch

Download the latest available from IBM FixCentral for the identified hardware model and follow the provided instructions to apply to the system/adapter

Properties

Operating systems: Any
Tags: aixservices
Reference: CIS IBM AIX 7 Benchmark v1.2.0 - 7.2 Ensure system firmware updates are installed