Details

The network element must be configured to ensure passwords are not viewable when displaying configuration information.

Many attacks information systems and network elements are launched from within the network. Hence, it is imperative that all passwords are encrypted so they cannot be intercepted by viewing the console or printout of the configuration.

Solution

Configure the network element to ensure passwords are not viewable when displaying configuration information.
Device(config)# service password
Device(config)# username name secret S3cr3T!
Device(config)# enable secret $MyS3cr3TPW$
Device(config)# end

Supportive Information

The following resource is also helpful.

• https://iasecontent.disa.mil/stigs/zip/U_Network_L2_Switch_V8R27_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system Cisco.

References

• 800-53|IA-5(1)(c)
• CAT|I
• CSCv6|16.13
• CSCv6|16.14
• Rule-ID|SV-41449r2_rule
• STIG-ID|NET0600
• Vuln-ID|V-3062

Source

• Tenable.com/audits