nuclei-templates/file/audit/cisco/set-and-secure-passwords.yaml

id: set-and-secure-passwords

info:
  name: Cisco Set and Secure Password - Detect
  author: pussycat0x
  severity: info
  description: |
    Cisco set and secure password functionality is recommended to control privilege level access. To set a local password to control access to various privilege levels, use the enable password command in global configuration mode. To remove the password requirement, use the no form of this command.
  reference:
    - https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-d1-cr-book/sec-cr-e1.html#wp3884449514
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0
    cwe-id: CWE-200
  tags: audit,file,cisco,config-audit,cisco-switch

file:
  - extensions:
      - conf

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "service password-encryption"
        negative: true

      - type: word
        words:
          - "configure terminal"

# Enhanced by md on 2023/05/03
# digest: 4b0a00483046022100efdfaccc895a5ecc59a52d4539a4c09b63d234684db78a580016862fb5e317600221009a3a6c7fb3111578da8bff93c055c86b6f51a0ac995ae2f78870298c49422e89:922c64590222798bb761d5b6d8e72950
Create set-and-secure-passwords.yaml 2022-05-28 08:26:29 +00:00			`id: set-and-secure-passwords`

			`info:`
Enhancement: file/audit/cisco/set-and-secure-passwords.yaml by md 2023-05-03 22:00:08 +00:00			`name: Cisco Set and Secure Password - Detect`
Create set-and-secure-passwords.yaml 2022-05-28 08:26:29 +00:00			`author: pussycat0x`
			`severity: info`
Update set-and-secure-passwords.yaml 2022-05-31 06:23:21 +00:00			`description: \|`
templateman update 2023-10-14 11:27:55 +00:00			`Cisco set and secure password functionality is recommended to control privilege level access. To set a local password to control access to various privilege levels, use the enable password command in global configuration mode. To remove the password requirement, use the no form of this command.`
Update set-and-secure-passwords.yaml 2022-05-31 06:23:21 +00:00			`reference:`
			`- https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-d1-cr-book/sec-cr-e1.html#wp3884449514`
Enhancement: file/audit/cisco/set-and-secure-passwords.yaml by md 2023-05-03 22:00:08 +00:00			`classification:`
			`cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N`
templateman update 2023-10-14 11:27:55 +00:00			`cvss-score: 0`
Enhancement: file/audit/cisco/set-and-secure-passwords.yaml by md 2023-05-03 22:00:08 +00:00			`cwe-id: CWE-200`
auto tagging via templateman 2024-01-14 09:21:50 +00:00			`tags: audit,file,cisco,config-audit,cisco-switch`
All lint fix 2023-12-14 03:48:19 +00:00
Create set-and-secure-passwords.yaml 2022-05-28 08:26:29 +00:00			`file:`
			`- extensions:`
			`- conf`

			`matchers-condition: and`
			`matchers:`
			`- type: word`
			`words:`
			`- "service password-encryption"`
			`negative: true`
Added positive matcher to avoid false positive result. (#4517) 2022-05-31 14:43:08 +00:00
			`- type: word`
			`words:`
cisco template not tagged as file 2023-02-24 15:27:00 +00:00			`- "configure terminal"`
Enhancement: file/audit/cisco/set-and-secure-passwords.yaml by md 2023-05-03 22:00:08 +00:00
			`# Enhanced by md on 2023/05/03`
Auto Template Signing [Fri Jan 26 08:31:11 UTC 2024] :robot: 2024-01-26 08:31:11 +00:00			`# digest: 4b0a00483046022100efdfaccc895a5ecc59a52d4539a4c09b63d234684db78a580016862fb5e317600221009a3a6c7fb3111578da8bff93c055c86b6f51a0ac995ae2f78870298c49422e89:922c64590222798bb761d5b6d8e72950`