A MFD or a printer device is not flash upgradeable or is not configured to use the most current firmware available.

From Multifunction Device and Network Printers STIG

SV-7002r1_rule A MFD or a printer device is not flash upgradeable or is not configured to use the most current firmware available.

Vulnerability discussion

MFD devices or printers utilizing old firmware can expose the network to known vulnerabilities leading to a denial of service or a compromise of sensitive data.The SA will ensure devices are flash upgradeable and are configured to use the most current firmware available

Check content

The reviewer will, with the assistance of the SA, verify that the devices are flash upgradeable and are configured to use the most current firmware available.

Fix text

If the MFD or printer cannot be upgraded replace it. If the MFD or printer can be upgraded but is not using the latest release of the firmware, upgrade the firmware.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.