+SYS.4.4.A24 Secure Configuration and Usage of an Embedded Web Server (H)

SYS.4.4.A24 Secure Configuration and Usage of an Embedded Web Server (H)

Web servers integrated into IoT devices SHOULD be configured as restrictively as possible. Whenever possible, a web server of this kind SHOULD NOT be operated using a privileged account.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems