Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6780 | MFD02.004 | SV-7002r1_rule | VIVM-1 | Medium |
Description |
---|
MFD devices or printers utilizing old firmware can expose the network to known vulnerabilities leading to a denial of service or a compromise of sensitive data. The SA will ensure devices are flash upgradeable and are configured to use the most current firmware available |
STIG | Date |
---|---|
Multifunction Device and Network Printers STIG | 2015-12-18 |
Check Text ( C-2965r1_chk ) |
---|
The reviewer will, with the assistance of the SA, verify that the devices are flash upgradeable and are configured to use the most current firmware available. |
Fix Text (F-6433r1_fix) |
---|
If the MFD or printer cannot be upgraded replace it. If the MFD or printer can be upgraded but is not using the latest release of the firmware, upgrade the firmware. |