Skip to main content

AI Disclaimer

English

German

Main

AI Disclaimer

Main

IGEL Product Security Information

ISN 2026-09: UMS Information Disclosure
ISN 2026-08: Telnetd Vulnerabilities
ISN 2026-07: AppArmor Vulnerabilities
ISN 2026-06: Chromium Vulnerabilities Exploited in the Wild
ISN 2026-05: Firefox ESR Vulnerabilities
ISN 2026-04: Chromium Vulnerabilities Exploited in the Wild
ISN 2026-03: OpenSSL Vulnerability
ISN 2026-02: Chromium Vulnerabilities
ISN 2026-01: X.Org Server Vulnerabilities
ISN 2025-51: Chromium Vulnerabilities
ISN 2025-50 Chromium Vulnerability Exploited in the Wild
ISN 2025-49 Firefox ESR Vulnerabilities
ISN 2025-48 Chromium Vulnerabilities
ISN 2025-47: IGEL Citrix Workspace App Package Vulnerability
ISN 2025-46: Webkit Vulnerability
ISN 2025-45 LibTiff Vulnerability
ISN 2025-44 Chromium Vulnerabilities
ISN 2025-43: OpenSSL Vulnerability
ISN 2025-42: ImageMagick Vulnerabilities
ISN 2025-41: CUPS Vulnerability
ISN 2025-39: Webkit Vulnerability
ISN 2025-38: Critical Chromium Vulnerabilities CVE-2025-10200 & CVE-2025-10585
ISN 2025-37: Critical Chromium Vulnerability
ISN 2025-36: Firefox ESR Vulnerabilities
ISN 2025-35: JRE Vulnerabilities
ISN 2025-34: Libarchive Vulnerability
ISN 2025-33: Chromium Vulnerabilities
ISN 2025-32: Webkit Vulnerabilities
ISN 2025-31: XSS Vulnerabilities in UMS
ISN 2025-30: Firefox ESR Vulnerabilities
ISN 2025-29: Chromium Vulnerability in ANGLE Exploited in the Wild
ISN 2025-26: Chromium Vulnerability Exploited in the Wild
ISN 2025-25: Firefox ESR Vulnerability
ISN 2025-24: Command Execution in IGEL OS
ISN 2025-23: Chromium Vulnerability Exploited in the Wild
ISN 2025-22: Statement on CVE-2025-47827 in IGEL OS 10
ISN 2025-21: Glibc Vulnerability
ISN 2025-20: Critical Firefox ESR Vulnerabilities
ISN 2025-19: Chromium Vulnerability Exploited in the Wild
ISN 2025-18: Critical Libsoup Vulnerability
ISN 2025-17: Vulnerabilities in NVIDIA Graphics Driver
[CORRECTED] ISN 2025-16: Critical Vulnerability in Ppp
ISN 2025-15: Perl Vulnerability
ISN 2025-14: Critical IGEL OS Privilege Escalation
ISN 2025-13: Chromium Critical Vulnerability
ISN 2025-12: Chromium Critical Vulnerability
ISN 2025-10: Linux Kernel Vulnerability
ISN 2025-09: Firefox ESR Vulnerabilities
ISN 2025-08: Libxml2 Vulnerabilities
ISN 2025-07: X.org Vulnerabilities
ISN 2025-06: Critical Webkit Vulnerability
ISN 2025-05: HP Anyware Vulnerability
ISN 2025-04: Microsoft Edge Vulnerabilities
ISN 2025-03: Gstreamer Vulnerabilities
ISN 2025-02: Chromium Vulnerabilities
ISN 2025-01: Firefox ESR Vulnerabilities
ISN 2024-24: Chromium Vulnerability
ISN 2024-23: Webkit2GTK Critical Vulnerability
ISN 2024-22: Firefox ESR Vulnerabilities
ISN 2024-21: Chromium Critical Vulnerability
ISN 2024-20: Chromium Vulnerabilities
ISN 2024-19: CUPS Vulnerabilities
ISN 2024-18: Critical Firefox ESR Vulnerability
ISN 2024-17: OpenSSH Vulnerability
ISN 2024-16: Libarchive Vulnerability
ISN 2024-15: Libaom Vulnerability
ISN 2024-14: Chromium Vulnerabilities
ISN 2024-13: Firefox ESR Vulnerabilities
ISN 2024-12: Vulnerability in Starter License Verification
ISN 2024-11: Chromium Critical Vulnerability
ISN 2024-10: Chromium Critical Vulnerability
ISN 2024-09: Xdg-open “Open With” Vulnerability
ISN 2024-08: Firefox ESR Vulnerabilities
ISN 2024-07: Chromium Vulnerabilities
ISN 2024-06: OS 11 Kernel Vulnerabilities
ISN 2024-05: OS 12 Kernel Vulnerability
ISN 2024-04: Libuv Vulnerability
ISN 2024-03: Firefox ESR Vulnerabilities
ISN 2024-02: X.org Vulnerabilities
ISN 2024-01: Chromium Vulnerabilities
ISN 2023-39: SSH Terrapin Vulnerability
ISN 2023-38: X.org Vulnerabilities
ISN 2023-36: BlueZ Vulnerability
ISN 2023-35: GIMP Vulnerabilities
ISN 2023-34: Perl Vulnerabilities
ISN 2023-33: Zlib Vulnerability
ISN 2023-32: Chromium Vulnerabilities
ISN 2023-31: Webkit Vulnerabilities
ISN 2023-30: Ffmpeg Vulnerabilities
ISN 2023-29: Chromium Vulnerabilities
ISN 2023-28: Firefox ESR Vulnerabilities
ISN 2023-27: ActiveMQ in UMS HA
ISN 2023-26: X.org Vulnerabilities
ISN 2023-25: Webkit Vulnerabilities
ISN 2023-24: Chromium Vulnerability
ISN 2023-23: Curl Vulnerability
ISN 2023-22: Multiple X11 Vulnerabilites
ISN 2023-21: Libvpx Vulnerability in Chromium and Firefox
ISN 2023-20: Firefox Libwebp Vulnerability
ISN 2023-19: Libwebp Vulnerability in Chromium and Other Software
ISN-2023-18: SnakeYAML Vulnerability
ISN 2023-17: AMD Inception CPU Vulnerability
ISN 2023-16: Intel Downfall CPU Vulnerability
ISN 2023-15: ZenBleed Vulnerability
ISN 2023-14: IGEL OS OpenSSH Vulnerability
ISN 2023-13: IGEL OS Ghostscript Vulnerability
ISN 2023-12: Citrix Secure Access Client
ISN 2023-11: “StackRot” in IGEL OS Kernel
ISN 2023-10: Log4j 1.x in IBM i Access Client
ISN 2023-09: RCE in CUPS Printing System
ISN 2023-08: Chromium Critical Vulnerability
ISN 2023-07: Device Encryption Password Bug
ISN 2023-06: UEFI Secure Boot Malware and IGEL OS
ISN 2023-05: Chromium Local File Access
ISN 2023-04: IGEL OS Local Privilege Escalation
ISN 2023-03: Chromium Vulnerabilities
ISN 2023-02: Firefox ESR Vulnerabilities
ISN 2023-01: Citrix Workspace App Vulnerability
ISN 2022-21: Chromium Vulnerability
ISN 2022-20: Firefox ESR Vulnerabilities
ISN 2022-19: Log4j 1.x Remainder in UMS
ISN 2022-18: Linux Kernel Vulnerability
ISN 2022-17: Chromium WebRTC Vulnerability
ISN 2022-16: Firefox Vulnerabilities
ISN 2022-15: Chromium Browser Vulnerabilities
ISN 2022-14: Chromium Browser Vulnerabilities
ISN 2022-13: UMS Vulnerabilities
ISN 2022-12: Teradici PCoIP Library Vulnerabilities
ISN 2022-11: VMware Horizon Privilege Escalation
ISN 2022-10: Firefox Vulnerabilities
ISN 2022-09: Zlib Vulnerability
ISN 2022-08: Chromium JavaScript Vulnerability
ISN 2022-07: Chromium Browser Vulnerabilities
ISN 2022-06: OpenSSL Denial of Service
ISN 2022-05: Netfilter Escalation of Privilege
ISN 2022-04: Dirty Pipe Escalation of Privilege
ISN 2022-03: Glibc Denial of Service in IGEL OS
ISN 2022-02: UEFI Vulnerabilities in UD Devices
ISN 2022-01: Polkit Escalation of Privilege
ISN 2021-11: UMS Log4j Vulnerability
ISN 2021-10: Chromium vulnerabilities
ISN 2021-09: Firefox ESR vulnerabilities
ISN 2021-08: ICG Authentication Vulnerability
ISN 2021-07: UMS Web App Information Disclosure
ISN 2021-06: IGEL OS OpenSSH Vulnerabilities
ISN 2021-05: IGEL OS Denial of Service
ISN 2021-04: IGEL OS Kernel Privilege Escalation
ISN 2021-03: IGEL W10 Print Spooler Vulnerability
ISN 2021-02: IGEL OS and W10 Wi-Fi Vulnerabilities (Fragattacks)
ISN 2021-01: IGEL OS Remote Command Execution Vulnerability
ISN 2020-10: IGEL OS Bluetooth Vulnerabilities
ISN 2020-09: Command Execution from Start Menu
ISN 2020-08: Firefox ESR Various Vulnerabilities
ISN 2020-07: Firefox ESR Various Vulnerabilities
ISN 2020-06: IGEL Cloud Gateway (ICG) Various Vulnerabilities
ISN 2020-05: Intel Chipset Vulnerabilities
ISN 2020-04: Firefox ESR Various Vulnerabilities
ISN 2020-03: Firefox ESR Vulnerabilities
ISN 2020-02: Windows CryptoAPI Spoofing Vulnerability
ISN 2020-01: Firefox ESR Vulnerability
ISN-2019-13: Windows Defender
ISN-2019-12: Internet Explorer Vulnerability
ISN 2019-11: Firefox ESR Vulnerabilities
ISN 2019-10: Spectre SWAPGS CPU Vulnerability
ISN 2019-09: IGEL OS SWP Vulnerability
ISN 2019-08: Firefox ESR Vulnerabilities
ISN 2019-07: Firefox ESR Vulnerability
ISN 2019-06: IGEL OS Kernel Vulnerability
ISN 2019-05: UMS HA Vulnerability
ISN 2019-04: RDP Vulnerability in WES7
ISN 2019-03: Zombieload, RIDL, Fallout
ISN 2019-02: UMS Vulnerability
ISN 2019-01: UMS Vulnerability

IGEL OS 12 Hardening Guide

Security Introduction

Setting Passwords

Setting an Administrator Password
Enforcing User Authentication at the Device
Password-Protecting Sessions and Accessories
Using Screenlock
Setting a UEFI Password
Using Two-Factor Authentication (2FA)

How to Keep the System Up-To-Date

Disabling Access to Components

Disabling Local Terminal Access
Disabling Virtual Console Access
Hiding Unused Accessories
Use Strong Device Encryption Settings

Minimizing the Attack Surface

Secure App Choices
Using Browser Kiosk Mode
Disabling the PC/SC Daemon
Disabling X Server TCP Connections
Disabling RPC Portmapper Service
Disabling Storage Hotplug
Using USB Device Control
Disabling USB Boot

Configuring Remote Access and Management

Tying Endpoints to Your UMS instance
Using Secure Shadowing
Disabling Secure Terminal
Using Public Key Authentication

Wi-Fi and Bluetooth

Restricting Wi-Fi Access
Bluetooth

Network Security
Using IGEL UD Pocket for BYOD Devices

Product Security Archive
Reporting Vulnerabilities in IGEL Products

UEFI Secure Boot Enabling Guides

IGEL OS

Enabling UEFI Secure Boot in UD2-LX 40
Enabling UEFI Secure Boot in UD2-LX 50/51
Enabling UEFI Secure Boot in UD3-LX 50
Enabling UEFI Secure Boot in UD3-LX 51
Enabling UEFI Secure Boot in UD3-LX 60
Enabling UEFI Secure Boot in UD6-LX 51
Enabling UEFI Secure Boot in UD7-LX 10
Enabling UEFI Secure Boot in UD7-LX 20

Microsoft Windows 10 IoT

Enabling UEFI Secure Boot in UD3-W10 51
Enabling UEFI Secure Boot in UD6-W10 51
Enabling UEFI Secure Boot in UD7-W10 10

Verifying that Secure Boot is Enabled
Secured-Core PCs: Microsoft 3rd-Party UEFI Certificate for Secure Boot

AMD Secure Processor

UD7 Model H850C

AMD Memory Guard

BSI Grundschutz

Anleitung zum IT-Grundschutz-konformen Betrieb von IGEL OS 11.03.100

Über dieses Dokument
Grundsätzliche Vorgaben zur Administration
Fernwartung
Zugriffskontrolle
Absicherung des Bootvorgangs
Schutz bei Diebstahl oder Defekt
Schutz vor Manipulation
Einschränken der Benutzerumgebung
Protokollierung und Protokollauswertung
Datensicherung
Verschlüsselung
Virenschutz
Systempflege
Zusätzliche Anforderungen aus SYS.2
Logging and Log Evaluation

Anleitung zum IT-Grundschutz-konformen Betrieb von IGEL OS 12

Über das Dokument

OPS.1.1.2 Ordnungsgemäße IT-Administration

Standard-Anforderungen von OPS.1.1.2
Anforderungen bei erhöhtem Schutzbedarf von OPS.1.1.2
Basis-Anforderungen von OPS.1.1.2

OPS.1.1.3 Patch- und Änderungsmanagement

Basis-Anforderungen von OPS.1.1.3
Standard-Anforderungen von OPS.1.1.3
Anforderungen bei erhöhtem Schutzbedarf von OPS.1.1.3

OPS.1.1.4 Schutz vor Schadprogrammen

Basis-Anforderungen von OPS.1.1.4

OPS.1.1.5 Protokollierung

Basis-Anforderungen von OPS.1.1.5

OPS.1.2.5 Fernwartung

Standard-Anforderungen von OPS.1.2.5
Anforderungen bei erhöhtem Schutzbedarf von OPS1.2.5

SYS.2.1 Allgemeiner Client

Basis-Anforderungen von SYS.2.1
Standard-Anforderungen von SYS.2.1
Anforderungen bei erhöhtem Schutzbedarf von SYS.2.1

SYS.2.3 Clients unter Linux und Unix

Standard-Anforderungen von SYS.2.3
Anforderungen bei erhöhtem Schutzbedarf von SYS.2.3
Basis-Anforderungen von SYS.2.3

Weitere relevante Anforderungen

Parental Control Settings for IGEL OS
Xz Backdoor (CVE-2024-3094) Does Not Affect IGEL OS 11 and OS 12

Breadcrumbs

Home
Security & Safety
BSI Grundschutz
Anleitung zum IT-Grundschutz-konformen Betrieb von IGEL OS 12
OPS.1.2.5 Fernwartung

On this Page

Anforderungen bei erhöhtem Schutzbedarf von OPS1.2.5

OPS.1.2.5.A14 Dedizierte Clients und Konten bei der Fernwartung (H)

Ist durch den Einsatz von UMS 12 gegeben.

Legal Notice
Privacy Policy
Terms + Conditions

Copyright IGEL
Powered by Scroll Sites & Atlassian Confluence

English

German