A MFD or a printer device is not flash upgradeable or is not configured to use the most current firmware available.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6780	MFD02.004	SV-7002r1_rule	VIVM-1	Medium

Description
MFD devices or printers utilizing old firmware can expose the network to known vulnerabilities leading to a denial of service or a compromise of sensitive data. The SA will ensure devices are flash upgradeable and are configured to use the most current firmware available

STIG	Date
Multifunction Device and Network Printers STIG	2015-12-18

Details

Check Text ( C-2965r1_chk )
The reviewer will, with the assistance of the SA, verify that the devices are flash upgradeable and are configured to use the most current firmware available.

Fix Text (F-6433r1_fix)
If the MFD or printer cannot be upgraded replace it. If the MFD or printer can be upgraded but is not using the latest release of the firmware, upgrade the firmware.