V-4582
The network device must require authentication for console access.
Finding ID
NET1623
Rule ID
SV-4582r5_rule
Severity
CCE
(None)
Group Title
Authentication required for console access.
CCI
(None)
Target Key
(None)
Documentable
No
Discussion
Network devices with no password for administrative access via the console provide the opportunity for anyone with physical access to the device to make configuration changes enabling them to disrupt network operations resulting in a network outage.
Fix Text
Configure authentication for console access on the network device.
Check Content
Review the network device's configuration and verify authentication is required for console access. If authentication is not configured for console access, this is a finding.
Responsibility
Information Assurance Officer