← Back to Multifunction Device and Network Printers Security Technical Implemetation Guide

V-6806

CAT I (High)

The device is not configured to prevent non-printer administrators from altering the global configuration of the device.

Rule ID

SV-7031r1_rule

STIG

Multifunction Device and Network Printers Security Technical Implemetation Guide

Version

V2R15

CCIs

None

Discussion

If unauthorized users can alter the global configuration of the MFD they can remove all security. This can lead to the compromise of sensitive data or the compromise of the network the MFD is attached to.

Check Content

The reviewer will, with the assistance of the SA, verify that the device is configured to prevent non-printer administrators from altering the global configuration of the device.

Fix Text

Configured the device to prevent non-printer administrators from altering the global configuration of the device.  If the device cannot be configured in this manner, replace the device with one that can be configured in an acceptable manner.