InformationDisables the password recovery
Disabling the password recovery is an additional physical control. It will prevent an attacker that will have circumvented all the physical safeguards and being in contact with the security appliance to change the existing login password, enable password and local user password and then hack the system.
SolutionRun the following to disable the password recovery:
hostname (config)# no service password-recovery
The password recovery is enabled by default