STIGQter: STIG Summary: Arista MLS EOS 4.X NDM Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Arista network device must enforce a minimum 15-character password length.

DISA Rule

SV-255954r1015710_rule

Vulnerability Number

V-255954

Group Title

SRG-APP-000164-NDM-000252

Rule Version

ARST-ND-000380

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure the Arista device to enforce a minimum password 15-character length.

switch#configure
switch(config)#management security
switch(config-mgmt-security)#password minimum length 15
switch(config-mgmt-security)#exit
switch(config)#
!

Check Contents

Review the Arista device configuration "show management security" to determine the minimum 15-character password length.

switch#show run | section management security
management security
password minimum length 15
!

If the Arista network device does not enforce a minimum 15-character password length, this is a finding.

Vulnerability Number

V-255954

Documentable

False

Rule Version

ARST-ND-000380

Severity Override Guidance

Review the Arista device configuration "show management security" to determine the minimum 15-character password length.

switch#show run | section management security
management security
password minimum length 15
!

If the Arista network device does not enforce a minimum 15-character password length, this is a finding.

Check Content Reference

M

Target Key

5511