Apple iOS/iPadOS 17 must implement the management setting: require passcode for incoming Airplay connection requests.
An XCCDF Rule
Description
When an incoming AirPlay request is allowed without a password, it may mistakenly associate the iPhone and iPad with an AirPlay-enabled device other than the one intended (i.e., by choosing the wrong one from the AirPlay list displayed). This creates the potential for someone in control of a mistakenly associated device to obtain DOD sensitive information without authorization. Requiring a password before such an association mitigates this risk. Passwords do not require any administration and are not required to comply with any complexity requirements. SFR ID: FMT_SMF_EXT.1.1 #40
- ID
- SV-259781r943668_rule
- Version
- AIOS-17-710950
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
Install a configuration profile to require that incoming AirPlay connection requests enter a password when connecting to a DOD iOS/iPadOS device.