Ensure system firmware updates are installed

FaibleNiveau 1Revue manuelleaix

Description

Security vulnerabilities and functional improvements are regularly addressed through firmware updates to the system and adapter firmware. Unpatched system or adapter firmware can expose systems to known vulnerabilities that may be exploited by attackers. It is recommended that system and adadpter firmware updates be performed on enterprise assets on a regular basis.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Execute the following command to obtain details of the hardware model and firmware # /usr/sbin/lsconf 2> /dev/null | /usr/bin/grep -E "System Model|Firmware" Compare the installed firmware with the latest available from IBM FixCentral for the identified hardware model. Note: This command should only be run on an partition which has physical hardware adaptors assigned to it. e.g. a partition configured as VIOS.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Download the latest available from IBM FixCentral for the identified hardware model and follow the provided instructions to apply to the system/adapter

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: aixservices
Référence: CIS IBM AIX 7 Benchmark v1.2.0 - 7.2 Ensure system firmware updates are installed