← Back to Multifunction Device and Network Printers Security Technical Implemetation Guide

V-6780

CAT II (Medium)

The MFD or Network Printer must employ the most current firmware available.

Rule ID

SV-7002r2_rule

STIG

Multifunction Device and Network Printers Security Technical Implemetation Guide

Version

V2R15

CCIs

None

Discussion

MFD devices or printers utilizing old firmware can expose the network to known vulnerabilities leading to a denial of service or a compromise of sensitive data. While the MFD must use the most current firmware available, it must not use a “call-home” feature that is not allowed.

Check Content

The reviewer will verify that the MFD or Network Printer are flash upgradeable and are configured to use the most current firmware available. <br /><br />Ensure any “call-home” feature is disabled.<br /><br />If the MFD or Network Printer is not flash upgradeable, this is a finding.<br /><br />If the MFD or Network Printer is not configured with the most current firmware, this is a finding.<br /><br />If the MFD or Network Printer has the “call-home” feature enabled, this is a finding.

Fix Text

If the MFD or printer cannot be upgraded replace it.<br /><br />If the MFD or printer can be upgraded but is not using the latest release of the firmware, upgrade the firmware.