Ensure the default administrator password has been changed

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings): confirm an administrator password is set and differs from the vendor default (try the documented default, e.g. blank, 'admin', '1111', 'x-admin' or the serial number, and expect it to be rejected). Also check the control-panel/service PIN and the SNMP write community. Confirm the password is unique per device and stored in the password vault; prefer LDAP/Kerberos-backed admin accounts where supported.

修正方法

修正方法: ガイダンスまたは IaC パッチ

EWS: Security > General Security / Account management > set a unique, strong (15+ chars) administrator password; change the device service/control-panel PIN; restrict admin sign-in to directory-backed accounts where supported. Fleet: push via the vendor fleet tool (HP Web Jetadmin / Security Manager, Xerox CentreWare, Ricoh Streamline NX).