STIGQter: STIG Summary: Juniper EX Series Switches Network Device Management Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Jul 2026:

The Juniper EX switch must change credentials for account of last resort when administrators who know the credential leave the organization.

DISA Rule

SV-253946r1018771_rule

Vulnerability Number

V-253946

Group Title

SRG-APP-000317-NDM-000282

Rule Version

JUEX-NM-000910

Severity

CAT II

CCI(s)

• CCI-004045 - Require users to be individually authenticated before granting access to the shared accounts or resources.

Weight

10

Fix Recommendation

Document this process in the SSP. Change the account of last resort to a new password when administrators who know the credential leave the organization

Set the password for the account of last resort:
set system login user <account of last resort name> authentication plain-text-password
New password: <password - not echoed to the screen>
Retype new password: <password verification - not echoed to the screen>

Check Contents

Review the site's SSP to verify the password for the account of last resort and the root account are changed when a system administrator with knowledge of the password leaves or no longer has a need to know/access.

If the credentials for account of last resort are not changed when administrators who know the credential leave the organization, this is a finding.

Vulnerability Number

V-253946

Documentable

False

Rule Version

JUEX-NM-000910

Severity Override Guidance

Review the site's SSP to verify the password for the account of last resort and the root account are changed when a system administrator with knowledge of the password leaves or no longer has a need to know/access.

If the credentials for account of last resort are not changed when administrators who know the credential leave the organization, this is a finding.

Check Content Reference

M

Target Key

5477