ID: INFO-17

Title: Web interface lacks password complexity requirements

Severity: Informational

CVSS Score: -

CVSS Vector String: -

Description: The password change functionality under System Tools → Password enforces no complexity requirements, accepting passwords as short as a single character. This means a user can trivially weaken their credentials after initial setup, and the interface provides no guidance toward choosing a strong password.

Remediation: Enforce a minimum password length and complexity policy requiring a mix of character types. Display password strength feedback to the user during the change process.

More information: See Web Interface Analysis chapter.