STIGQter STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must be configured to power off Bluetooth and disable the auxiliary port unless it is connected to a secured modem providing encryption and authentication.

DISA Rule

SV-283838r1203763_rule

Vulnerability Number

V-283838

Group Title

SRG-NET-000019-RTR-000001

Rule Version

NOKI-RT-000200

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Disable the auxiliary port and disable Bluetooth using the following commands.

- configure port A/3 shutdown

- configure system bluetooth power off

If used for out-of-band administrative access, the port must be connected to a secured modem providing encryption and authentication.

Check Contents

Review the configuration and verify Bluetooth is powered off and the auxiliary port is disabled unless a secured modem providing encryption and authentication is connected to it.

Use the command below and verify "Power State" is set to "off":

- show system bluetooth | match "Power State"

Power State : off Pairing Button : Disabled

If the power state is not set to "off", this is a finding.

Use the command below to verify the auxiliary/management port "Admin State" is down:

- show port A/3 | match "Admin State"

Admin State : down Oper Duplex : N/A

If the auxiliary port is not disabled or is not connected to a secured modem when it is enabled, this is a finding.

Vulnerability Number

V-283838

Documentable

False

Rule Version

NOKI-RT-000200

Severity Override Guidance

Review the configuration and verify Bluetooth is powered off and the auxiliary port is disabled unless a secured modem providing encryption and authentication is connected to it.

Use the command below and verify "Power State" is set to "off":

- show system bluetooth | match "Power State"

Power State : off Pairing Button : Disabled

If the power state is not set to "off", this is a finding.

Use the command below to verify the auxiliary/management port "Admin State" is down:

- show port A/3 | match "Admin State"

Admin State : down Oper Duplex : N/A

If the auxiliary port is not disabled or is not connected to a secured modem when it is enabled, this is a finding.

Check Content Reference

M

Target Key

5746