A MFD device, with scan to hard disk functionality used, is not configured to clear the hard disk between jobs.
An XCCDF Rule
Description
<VulnDiscussion>If the MFD is compromised the un-cleared, previously used, space on the hard disk drive can be read which can lead to a compromise of sensitive data. The SA will ensure the device is configured to clear the hard disk between jobs if scan to hard disk functionality is used.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>System Administrator</Responsibility><IAControls>ECRC-1</IAControls>
- ID
- SV-7026r1_rule
- Severity
- Medium
- Updated
Remediation - Manual Procedure
Configured the MFD to clear the hard disk between jobs if scan to hard disk functionality is used.