Detections
Analytics

2.1.4 Verify root login is disabled

Information

EOS can be configured to allow logging in as root directly by using the aaa root secret config command. This should be not be enabled. An authenticated, authorized user can obtain superuser access after logging in by accessing the bash shell if permitted.

Allowing remote root login bypasses the EOS cli and gives direct access to the bash shell.

Solution

Reset to default value

switch(config)#default aaa root

See Also

https://workbench.cisecurity.org/benchmarks/25683

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(2)

Plugin: Arista

Control ID: bbe13f1f5297d97c5c72fe97055e90e77390c7127917e5aa598ccf313a4e7566