STIGQter: STIG Summary: Network Device Management Security Requirements Guide Version: 4 Release: 1 Benchmark Date: 23 Apr 2021:

Network devices performing maintenance functions must restrict use of these functions to authorized personnel only.

DISA Rule

SV-202116r400147_rule

Vulnerability Number

V-202116

Group Title

SRG-APP-000408

Rule Version

SRG-APP-000408-NDM-000314

Severity

CAT II

CCI(s)

• CCI-002883 - The information system restricts the use of maintenance tools to authorized personnel only.
• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the network device to restrict use of maintenance functions to authorized personnel only.

Check Contents

Determine if the network device restricts the use of maintenance functions to authorized personnel only.

If other personnel can use maintenance functions on the network device, this is a finding.

Vulnerability Number

V-202116

Documentable

False

Rule Version

SRG-APP-000408-NDM-000314

Severity Override Guidance

Determine if the network device restricts the use of maintenance functions to authorized personnel only.

If other personnel can use maintenance functions on the network device, this is a finding.

Check Content Reference

M

Target Key

2890

Comments