STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must not have any default manufacturer passwords when deployed.

DISA Rule

SV-269805r1051800_rule

Vulnerability Number

V-269805

Group Title

SRG-APP-000845-NDM-000220

Rule Version

OS10-NDM-001070

Severity

CAT II

CCI(s)

CCI-004061 - For password-based authentication, verify when users create or update passwords, that the passwords are not found on the list of commonly-used, expected, or compromised passwords in IA-5 (1) (a).

Weight

Fix Recommendation

Configure new passwords for the admin and linuxadmin users as shown below and disable the linuxadmin:

OS10(config)# username admin password ********** role sysadmin

OS10(config)# system-user linuxadmin password ************
OS10(config)# system-user linuxadmin disable

Check Contents

If a default password is still configured for any user, warning messages will be displayed on login directly above the initial prompt, as shown below.

Log in to OS10 and verify that no warning messages about default passwords are displayed above the initial prompt:

%Warning : Default password for admin account should be changed to secure the system
%Warning : Default password for linuxadmin account should be changed to secure the system.
OS10#

If any default password warnings are displayed, this is a finding.

If "system-user linuxadmin disable" is not shown in the switch configuration, this is a finding.

The Dell OS10 Switch must not have any default manufacturer passwords when deployed.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key