STIGQter: STIG Summary: Network WLAN AP-NIPR Management Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 25 Oct 2023:

The network device must be configured to authenticate each administrator prior to authorizing privileges based on assignment of group or role.

DISA Rule

SV-243157r879594_rule

Vulnerability Number

V-243157

Group Title

SRG-APP-000153-NDM-000249

Rule Version

WLAN-ND-000600

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the network device to authenticate users before assigning privileges to each individual user account based on the role or group the account is assigned to.

Check Contents

Review the network device configuration and validate that users are authenticated before they are assigned privileges based on the role or group the account is assigned to.

If a user can gain access to network device privileges before they are authenticated, this is a finding.

Vulnerability Number

V-243157

Documentable

False

Rule Version

WLAN-ND-000600

Severity Override Guidance

Review the network device configuration and validate that users are authenticated before they are assigned privileges based on the role or group the account is assigned to.

If a user can gain access to network device privileges before they are authenticated, this is a finding.

Check Content Reference

M

Target Key

5392