STIGQter: STIG Summary: Nokia Service Router OS 25.x Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must enforce a minimum 15-character password length.

DISA Rule

SV-283770r1203355_rule

Vulnerability Number

V-283770

Group Title

SRG-APP-000164-NDM-000252

Rule Version

NOKI-ND-000380

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure the Nokia router with a minimum 15-character password length using the command below:

- configure system security password complexity-rules minimum-length 15

Check Contents

Verify "Accepted password length" is set to a minimum of 15 characters using the command below:

- show system security password-options | match length

User password history length : disabled
Accepted password length : 15..56 characters

If the Nokia router or its associated authentication server does not enforce a minimum 15-character password length, this is a finding.

Vulnerability Number

V-283770

Documentable

False

Rule Version

NOKI-ND-000380

Severity Override Guidance

Verify "Accepted password length" is set to a minimum of 15 characters using the command below:

- show system security password-options | match length

User password history length : disabled
Accepted password length : 15..56 characters

If the Nokia router or its associated authentication server does not enforce a minimum 15-character password length, this is a finding.

Check Content Reference

M

Target Key

5744