V-283414

Discussion

Security flaws with firmware are discovered daily. Vendors are constantly updating and patching their products to address newly discovered security vulnerabilities. Organizations (including any contractor to the organization) are required to promptly install security-relevant firmware updates. Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling must also be addressed expeditiously.

Check Content

Verify software updates are consistently applied to the HPE Alletra Storage ArcusOS device within the time frame defined for each patch.

Check the software version:
cli% showversion
        Release version 10.3.0

        Component Name                   Version
        CLI Server                       10.3.0
        CLI Client                       10.3.0
        System Manager                   10.3.0
        Kernel                           10.3.0
        IO Stack                         10.3.0
        Drive Firmware                   10.3.0
        Enclosure Firmware               10.3.0
        Upgrade Tool                     61 (231107)

If the HPE Alletra Storage ArcusOS device does not have security-relevant updates installed within the time period directed by the authoritative source, this is a finding.