STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must enforce password complexity by requiring that at least one lowercase character be used.

DISA Rule

SV-269783r1051734_rule

Vulnerability Number

V-269783

Group Title

SRG-APP-000167-NDM-000255

Rule Version

OS10-NDM-000420

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure the OS10 Switch and associated authentication server to enforce password complexity by requiring that at least one lowercase character be used:

OS10(config)# password-attributes character-restriction lower 1

Check Contents

Where passwords are used, confirm that the OS10 Switch and associated authentication server enforces password complexity by requiring that at least one lower-case character be used.

Review the configuration to verify that the lower password-attribute is set to 1:

OS10# show running-configuration password-attributes
!
password-attributes character-restriction lower 1

If the OS10 Switch and associated authentication server does not require that at least one lowercase character be used in each password, this is a finding.

Vulnerability Number

V-269783

Documentable

False

Rule Version

OS10-NDM-000420

Severity Override Guidance

Where passwords are used, confirm that the OS10 Switch and associated authentication server enforces password complexity by requiring that at least one lower-case character be used.

Review the configuration to verify that the lower password-attribute is set to 1:

OS10# show running-configuration password-attributes
!
password-attributes character-restriction lower 1

If the OS10 Switch and associated authentication server does not require that at least one lowercase character be used in each password, this is a finding.

Check Content Reference

M

Target Key

5666