STIGQter: STIG Summary: Nokia Service Router OS 25.x Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must only store cryptographic representations of passwords.

DISA Rule

SV-283773r1203364_rule

Vulnerability Number

V-283773

Group Title

SRG-APP-000171-NDM-000258

Rule Version

NOKI-ND-000440

Severity

CAT I

CCI(s)

• CCI-004062 - For password-based authentication, store passwords using an approved salted key derivation function, preferably using a keyed hash.

Weight

10

Fix Recommendation

Configure the Nokia router to encrypt all passwords using the command below:

- configure system security password hashing sha2-pbkdf2

Check Contents

Review the Nokia router configuration to determine if passwords are encrypted, as shown in the example below:

- show system security password-options | match hashing

Password hashing : sha2-pbkdf2

If "Password hashing" is not set to "sha2-pbkdf2" or "sha3-pbkdf2", this is a finding.

Vulnerability Number

V-283773

Documentable

False

Rule Version

NOKI-ND-000440

Severity Override Guidance

Review the Nokia router configuration to determine if passwords are encrypted, as shown in the example below:

- show system security password-options | match hashing

Password hashing : sha2-pbkdf2

If "Password hashing" is not set to "sha2-pbkdf2" or "sha3-pbkdf2", this is a finding.

Check Content Reference

M

Target Key

5744