STIGQter: STIG Summary: Multifunction Device and Network Printers STIG Version: 2 Release: 14 Benchmark Date: 25 Oct 2019:

The MFD or Network Printer must employ the most current firmware available.

DISA Rule

SV-7002r2_rule

Vulnerability Number

V-6780

Group Title

MFD Firmware

Rule Version

MFD02.004

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

If the MFD or printer cannot be upgraded replace it.

If the MFD or printer can be upgraded but is not using the latest release of the firmware, upgrade the firmware.

Check Contents

The reviewer will verify that the MFD or Network Printer are flash upgradeable and are configured to use the most current firmware available.

Ensure any “call-home” feature is disabled.

If the MFD or Network Printer is not flash upgradeable, this is a finding.

If the MFD or Network Printer is not configured with the most current firmware, this is a finding.

If the MFD or Network Printer has the “call-home” feature enabled, this is a finding.

Vulnerability Number

V-6780

Documentable

False

Rule Version

MFD02.004

Severity Override Guidance

The reviewer will verify that the MFD or Network Printer are flash upgradeable and are configured to use the most current firmware available.

Ensure any “call-home” feature is disabled.

If the MFD or Network Printer is not flash upgradeable, this is a finding.

If the MFD or Network Printer is not configured with the most current firmware, this is a finding.

If the MFD or Network Printer has the “call-home” feature enabled, this is a finding.

Check Content Reference

M

Target Key

551

Comments