The RUCKUS ICX Router must not be configured to have any zero-touch deployment feature enabled when connected to an operational network.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-273627 | RCKS-RTR-000600 | SV-273627r1110934_rule | CCI-002385 | medium |
| Description | ||||
| Network devices configured via a zero-touch deployment or auto-loading feature can have their startup configuration or image pushed to the device for installation via TFTP or Remote Copy (rcp). Loading an image or configuration file from the network is taking a security risk because the file could be intercepted by an attacker who could corrupt the file, resulting in a denial of service. | ||||
| STIG | Date | |||
| RUCKUS ICX Router Security Technical Implementation Guide | 2025-06-03 | |||
Details
Check Text (C-273627r1110934_chk)
Examine the startup config ("show conf") and examine whether any interfaces are configured with the keyword "dynamic".
If the startup config does not exist, this is a finding.
Fix Text (F-77623r1109902_fix)
Configure interfaces, as needed.
When complete, save the running config using "wr mem".