STIGQter: STIG Summary: Network WLAN AP-IG Management Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 25 Oct 2023:

The network device must implement replay-resistant authentication mechanisms for network access to privileged accounts.

DISA Rule

SV-243150r879597_rule

Vulnerability Number

V-243150

Group Title

SRG-APP-000156-NDM-000250

Rule Version

WLAN-ND-001700

Severity

CAT II

CCI(s)

CCI-001941 - Implement replay-resistant authentication mechanisms for access to privileged accounts and/or non-privileged accounts.

Weight

Fix Recommendation

Configure the network device to use SSH Version 2.

Check Contents

Review the configuration and verify SSH Version 1 is not being used for administrative access.

If the device is using an SSHv1 session, this is a finding.

Vulnerability Number

V-243150

Documentable

False

Rule Version

WLAN-ND-001700

Severity Override Guidance

Review the configuration and verify SSH Version 1 is not being used for administrative access.

If the device is using an SSHv1 session, this is a finding.

Check Content Reference

Target Key

5391