ILT-U-4165
Cybersecurity for CPE. (ANATEL 2346 – ETSI EN 303 645)
DETERMINATION | METHOD |
| Factory password requirements (§4.2-4.3) | ANATEL 2346 – §4 evaluate using ETSI TS 103 701 TSO 5.1 |
| Force password change on first use (§4.4) | ANATEL 2346 – §4 evaluate using ETSI TS 103 701 TSO 5.1 |
| User password complexity (§5.2-5.3) | ANATEL 2346 – §5 evaluate using ETSI TS 103 701 TSO 5.1 |
| Dictionary-based password check (§5.3) | ANATEL 2346 – §5 evaluate using ETSI TS 103 701 TSO 5.1 |
| Brute-force protection (§6.1a) | ANATEL 2346 – §6 evaluate using ETSI TS 103 701 TSO 5.1 |
| No hardcoded credentials (§6.1b) | ANATEL 2346 – §6 evaluate using ETSI TS 103 701 TSO 5.1 |
| Password encryption/hashing (§6.1c) | ANATEL 2346 – §6 evaluate using ETSI TS 103 701 TSO 5.4 |
| Session timeout (§6.1d) | ANATEL 2346 – §6 evaluate using ETSI TS 103 701 TSO 5.6 |
| Disable unused ports/services (§6.1e-f) | ANATEL 2346 – §6 evaluate using ETSI TS 103 701 TSO 5.6 |
| Password recovery robustness (§6.2) | ANATEL 2346 – §6 evaluate using ETSI TS 103 701 TSO 5.1 |
| Security update support (§7.1.1-7.1.3) | ANATEL 2346 – §7 evaluate using ETSI TS 103 701 TSO 5.3 |
| Vulnerability disclosure (§7.1.4-7.1.6) | ANATEL 2346 – §7 evaluate using ETSI TS 103 701 TSO 5.2 |
| Overall conformity of the Device Under Test | Qualitative assessment based on PASS / FAIL / NA verdicts |
Related products
ILT-U-2045
Testing of Requirements for quality of Ready to Use Software Product (RUSP) / COTS Software
ILT-U-1887
External Interface Security Assessment. GB 44495 (Clause 7.1 & 8.3) Phase 1 – Foundation Level
ILT-U-3693
Proficiency Testing Scheme for Random Number Generator (RNG) Assessment. Remote Gambling Technical Standards (RTS) and applicable regulatory assessment frameworks
