STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must enforce password complexity by requiring that at least one uppercase character be used.

DISA Rule

SV-269782r1051731_rule

Vulnerability Number

V-269782

Group Title

SRG-APP-000166-NDM-000254

Rule Version

OS10-NDM-000410

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure the OS10 Switch and associated authentication server to enforce password complexity by requiring that at least one uppercase character be used:

OS10(config)# password-attributes character-restriction upper 1

Check Contents

Where passwords are used, confirm that the OS10 Switch and associated authentication server enforces password complexity by requiring that at least one uppercase character be used.

Review the configuration to verify that the upper password-attribute is set to 1:

OS10# show running-configuration password-attributes
!
password-attributes character-restriction upper 1

If the OS10 Switch and associated authentication server does not require that at least one uppercase character be used in each password, this is a finding.

Vulnerability Number

V-269782

Documentable

False

Rule Version

OS10-NDM-000410

Severity Override Guidance

Where passwords are used, confirm that the OS10 Switch and associated authentication server enforces password complexity by requiring that at least one uppercase character be used.

Review the configuration to verify that the upper password-attribute is set to 1:

OS10# show running-configuration password-attributes
!
password-attributes character-restriction upper 1

If the OS10 Switch and associated authentication server does not require that at least one uppercase character be used in each password, this is a finding.

Check Content Reference

M

Target Key

5666