Check: AADC-NM-000145
A10 Networks ADC NDM STIG:
AADC-NM-000145
(in version v1 r1)
Title
The A10 Networks ADC must not use the default enable password. (Cat I impact)
Discussion
To assure accountability and prevent unauthenticated access, organizational administrators must be uniquely identified and authenticated for all network management accesses to prevent potential misuse and compromise of the system. The use of a default password for any account, especially one for administrative access, can quickly lead to a compromise of the device and subsequently, the entire enclave or system. The "admin" account is intended solely for the initial setup of the device and must be disabled when the device is initially configured. The default password for this account must immediately be changed at the first logon of an authorized administrator. The default enable password on the A10 is blank password, which can immediately be guessed and lead to a compromise. This password must be immediately set.
Check Content
After successfully logging on to the device, attempt to enter enable mode using the default (blank) password. If that is successful, this is a finding.
Fix Text
The following command changes the enable password to the character string entered: enable-password [newpassword]
Additional Identifiers
Rule ID: SV-82583r1_rule
Vulnerability ID: V-68093
Group Title: SRG-APP-000148-NDM-000246
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000764 |
The information system uniquely identifies and authenticates organizational users (or processes acting on behalf of organizational users). |
Controls
Number | Title |
---|---|
IA-2 |
Identification And Authentication (Organizational Users) |