Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6806 | MFD08.002 | SV-7031r1_rule | ECAN-1 | High |
Description |
---|
If unauthorized users can alter the global configuration of the MFD they can remove all security. This can lead to the compromise of sensitive data or the compromise of the network the MFD is attached to. |
STIG | Date |
---|---|
Multifunction Device and Network Printers STIG | 2015-06-30 |
Check Text ( C-3021r1_chk ) |
---|
The reviewer will, with the assistance of the SA, verify that the device is configured to prevent non-printer administrators from altering the global configuration of the device. |
Fix Text (F-6480r1_fix) |
---|
Configured the device to prevent non-printer administrators from altering the global configuration of the device. If the device cannot be configured in this manner, replace the device with one that can be configured in an acceptable manner. |