← Back to Multifunction Device and Network Printers Security Technical Implemetation Guide

V-6781

CAT I (High)

The default passwords and SNMP community strings of all management services have not been replaced with complex passwords.

Rule ID

SV-7003r2_rule

STIG

Multifunction Device and Network Printers Security Technical Implemetation Guide

Version

V2R15

CCIs

None

Discussion

There are many known vulnerabilities in the SNMP protocol and if the default community strings and passwords are not modified an unauthorized individual could gain control of the MFD or printer. This could lead to a denial of service or the compromise of sensitive data.<br />The SA will ensure the default passwords and SNMP community strings of all management services are replaced with complex passwords.<br />

Check Content

The reviewer will, with assistance from the SA, verify the default passwords and SNMP community strings of all management services have been  replaced with complex passwords.

Fix Text

Develop a plan to coordinate the modification of the default passwords and SNMP community strings of all management services replacing them with complex passwords.  Obtain CM approval of the plan and execute the plan.