STIGQter: STIG Summary: WLAN Controller Security Technical Implementation Guide (STIG) Version: 6 Release: 15 Benchmark Date: 26 Apr 2019:

Network devices must not have any default manufacturer passwords.

DISA Rule

SV-3143r4_rule

Vulnerability Number

V-3143

Group Title

Devices exist with standard default passwords.

Rule Version

NET0240

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Remove any vendor default passwords from the network devices configuration.

Check Contents

Review the network devices configuration to determine if the vendor default password is active.

If any vendor default passwords are used on the device, this is a finding.

Vulnerability Number

V-3143

Documentable

False

Rule Version

NET0240

Severity Override Guidance

Review the network devices configuration to determine if the vendor default password is active.

If any vendor default passwords are used on the device, this is a finding.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

1538

Comments