The Nokia router must not be configured to have the auto-boot feature enabled when connected to an operational network.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-283872 | NOKI-RT-000540 | SV-283872r1204036_rule | CCI-002385 | medium |
| Description | ||||
| Nokia network devices that are configured via a zero-touch deployment or auto-loading feature can have their startup configuration or image pushed to the device for installation via Trivial File Transfer Protocol (TFTP) or Remote Copy (RCP). Loading an image or configuration file from the network is taking a security risk because the file could be intercepted by an attacker who could corrupt the file, resulting in a denial of service. | ||||
| STIG | Date | |||
| Nokia Service Router OS 25.x Router Security Technical Implementation Guide | 2026-06-15 | |||
Details
Check Text (C-283872r1204036_chk)
Review the device configuration to determine if the auto-boot feature is enabled.
Verify "auto-boot" is not configured when using the command below:
- show bof | match "auto-boot"
Note: If auto-boot is enabled, it will appear as "auto-boot". If it is disabled, it will not appear.
If a configuration auto-boot is enabled, this is a finding.
Fix Text (F-88342r1203864_fix)
Disable the auto-boot feature in the bof, as show in the example below:
- bof no auto-boot