SI-2(6)
SI-2(6): Removal of Previous Versions of Software and Firmware
Remove previous versions of [software and firmware components to be removed after updated versions have been installed are defined;] after updated versions have been installed.
Supplemental
Previous versions of software or firmware components that are not removed from the system after updates have been installed may be exploited by adversaries. Some products may automatically remove previous versions of software and firmware from the system.
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | low |
| Availability | unknown |
| Overlays |
|---|
| DAF Baseline |
| CSF Categories |
|---|
| None |