STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must be configured to disable the Bash shell.

DISA Rule

SV-269777r1051716_rule

Vulnerability Number

V-269777

Group Title

SRG-APP-000142-NDM-000245

Rule Version

OS10-NDM-000350

Severity

CAT I

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Disable Bash shell from the CLI:

OS10# configure terminal
OS10(config)# system-cli disable

Check Contents

Verify the bash shell is disabled.

Check the switch configuration for the setting "system-cli disable".

If system-cli disable is not configured, this is a finding.

Vulnerability Number

V-269777

Documentable

False

Rule Version

OS10-NDM-000350

Severity Override Guidance

Verify the bash shell is disabled.

Check the switch configuration for the setting "system-cli disable".

If system-cli disable is not configured, this is a finding.

Check Content Reference

M

Target Key

5666