Unauthorized accounts must not be configured for access to the network device.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3058	NET0470	SV-3058r5_rule		Medium

Description
A malicious user attempting to gain access to the network device may compromise an account that may be unauthorized for use. The unauthorized account may be a temporary or inactive account that is no longer needed to access the device. Denial of Service, interception of sensitive information, or other destructive actions could potentially take place if an unauthorized account is configured to access the network device.

Description

A malicious user attempting to gain access to the network device may compromise an account that may be unauthorized for use. The unauthorized account may be a temporary or inactive account that is no longer needed to access the device. Denial of Service, interception of sensitive information, or other destructive actions could potentially take place if an unauthorized account is configured to access the network device.

STIG	Date
Firewall Security Technical Implementation Guide - Cisco	2017-07-12

Details

Check Text ( C-3505r5_chk )
Review the organization's responsibilities list and reconcile the list of authorized accounts with those accounts defined for access to the network device. If an unauthorized account is configured for access to the device, this is a finding.

Fix Text (F-3083r5_fix)
Remove any account configured for access to the network device that is not defined in the organization's responsibilities list.