STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must enforce password complexity by requiring that at least one numeric character be used.

DISA Rule

SV-269784r1051737_rule

Vulnerability Number

V-269784

Group Title

SRG-APP-000168-NDM-000256

Rule Version

OS10-NDM-000430

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure the OS10 Switch and associated authentication server to enforce password complexity by requiring that at least one numeric character be used:

OS10(config)# password-attributes character-restriction numeric 1

Check Contents

Where passwords are used, confirm that the OS10 Switch and associated authentication server enforces password complexity by requiring that at least one numeric character be used.

Review the configuration to verify that the numeric password-attribute is set to 1:

OS10# show running-configuration password-attributes
!
password-attributes character-restriction numeric 1

If the OS10 Switch and associated authentication server does not require that at least one numeric character be used in each password, this is a finding.

Vulnerability Number

V-269784

Documentable

False

Rule Version

OS10-NDM-000430

Severity Override Guidance

Where passwords are used, confirm that the OS10 Switch and associated authentication server enforces password complexity by requiring that at least one numeric character be used.

Review the configuration to verify that the numeric password-attribute is set to 1:

OS10# show running-configuration password-attributes
!
password-attributes character-restriction numeric 1

If the OS10 Switch and associated authentication server does not require that at least one numeric character be used in each password, this is a finding.

Check Content Reference

M

Target Key

5666