The MFD or Network Printer must employ the most current firmware available.
An XCCDF Rule
Description
<VulnDiscussion>MFD devices or printers utilizing old firmware can expose the network to known vulnerabilities leading to a denial of service or a compromise of sensitive data. While the MFD must use the most current firmware available, it must not use a “call-home” feature that is not allowed.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-7002r2_rule
- Severity
- Medium
- Updated
Remediation - Manual Procedure
If the MFD or printer cannot be upgraded replace it.
If the MFD or printer can be upgraded but is not using the latest release of the firmware, upgrade the firmware.