Title

The system must notify the user when a Bluetooth device attempts to connect. (Cat II impact)

Discussion

If not configured properly, Bluetooth may allow rogue devices to communicate with a system. If a rogue device is paired with a system, there is potential for sensitive information to be compromised.

Check Content

This is NA if the system does not have Bluetooth. Verify Bluetooth notifies users if devices attempt to connect. Search for "Bluetooth". Select "Devices and Printers". View Bluetooth Settings. If "Alert me when a new Bluetooth device wants to connect" is not checked, this is a finding.

Fix Text

Configure Bluetooth to notify users if devices attempt to connect. View Bluetooth Settings. Ensure "Alert me when a new Bluetooth device wants to connect" is checked.

Additional Identifiers

Rule ID:

Vulnerability ID: V-36762

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.