Workload misconfigurations

VMware VM CD/DVD Devices

Platform(s)
  • N/A

Description

Removing unnecessary hardware devices can reduce the number of potential attack channels and help prevent attacks.
  • Recommended Mitigation

    Ensure that no CD/DVD device is connected to a virtual machine unless required. For a CD/DVD device to be disconnected, the ideX:Y.present parameter should either not be present or have a value of FALSE.