Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-4582 | NET1623 | SV-4582r5_rule | IAIA-1 IAIA-2 | High |
Description |
---|
Network devices with no password for administrative access via the console provide the opportunity for anyone with physical access to the device to make configuration changes enabling them to disrupt network operations resulting in a network outage. |
STIG | Date |
---|---|
Perimeter Router Security Technical Implementation Guide | 2015-07-01 |
Check Text ( C-3510r6_chk ) |
---|
Review the network device's configuration and verify authentication is required for console access. If authentication is not configured for console access, this is a finding. |
Fix Text (F-4515r4_fix) |
---|
Configure authentication for console access on the network device. |