Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6782 | MFD02.002 | SV-7004r2_rule | High |
Description |
---|
If the MFD does not maintain it state over a power down or restart, it will expose the network to all of the vulnerabilities that where mitigated by the modifications made to its configuration state. This also prevents accidental implementation of a “call-home” feature that is not allowed. |
STIG | Date |
---|---|
Multifunction Device and Network Printers STIG | 2019-01-04 |
Check Text ( C-2968r2_chk ) |
---|
The reviewer will verify the MFD or Network Printer maintains its configuration state after a power down or restart. Review the device documentation and/or confirm through demonstration to verify the MFD maintains configuration settings. If the MFD or Network Printer does not maintain its configuration state, this is a finding. |
Fix Text (F-6435r2_fix) |
---|
If the MFD or Network Printer cannot be configured to maintain state, then replace the MFD with a MFD that will maintain its configuration state (passwords, service settings, etc) after a power down or restart. |