Title

Apple iOS/iPadOS 15 must disable connections to Siri servers for the purpose of translation. (Cat II impact)

Discussion

If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DoD information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DoD sensitive information. Translation information could contain sensitive DoD information and therefore should not leave the DoD control. SFR ID: FMT_SMF_EXT.1.1 #47

Check Content

This check procedure is performed on the device management tool. Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review. In the iOS management tool, verify "Disable connections to Siri servers for the purpose of translation" is checked. If connections to Siri servers are not disabled for translation, this is a finding.

Fix Text

Configure the Apple iOS configuration profile to disable connections to Siri servers for the purpose of translation. The procedure for implementing this control will vary depending on the MDM/EMM used by the mobile service provider. In the MDM console, select "disable connections to Siri servers for the purpose of translation".

Additional Identifiers

Rule ID: SV-250980r802031_rule

Vulnerability ID: V-250980

Group Title: PP-MDF-990000

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.