The network device must require authentication for console access.

From Infrastructure Router Security Technical Implementation Guide Cisco

Part of Authentication required for console access.

Associated with IA controls: IAIA-2, IAIA-1

SV-19270r3_rule The network device must require authentication for console access.

Vulnerability discussion

Network devices with no password for administrative access via the console provide the opportunity for anyone with physical access to the device to make configuration changes enabling them to disrupt network operations resulting in a network outage.

Check content

Review the network device's configuration and verify authentication is required for console access. If the device is accessed via the aux port, then verify that this port also requires authentication. If it is not used, then it must be disabled. The console port and the disabled aux port should look similar to the configuration example below that references an authentication list configured as AUTH_LIST. line con 0 login authentication AUTH_LIST exec-timeout 10 0 line aux 0 no exec

Fix text

Configure authentication for console access on the network device.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.