Title

The network device must require authentication for console access. (Cat I impact)

Discussion

Network devices with no password for administrative access via the console provide the opportunity for anyone with physical access to the device to make configuration changes enabling them to disrupt network operations resulting in a network outage.

Check Content

Review the network device's configuration and verify authentication is required for console access. If authentication is not configured for console access, this is a finding.

Fix Text

Configure authentication for console access on the network device.

Additional Identifiers

Rule ID: SV-4582r5_rule

Vulnerability ID: V-4582

Group Title: Authentication required for console access.

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.