TMA-MFD-2.1.6
Disable Universal Plug and Play - UPnP
Описание
UPnP is designed to create a distributed plug-and-play environment over an IP network for the purpose of automatic device discovery, notification, and configuration. It is recommended that UPnP capabilities be disabled to reduce risk introduced by vulnerabilities that are exposed via this mechanism. If the UPnP capabilities of the MFD are mis-configured, a malicious entity may alter the MFD’s configuration which may lead to loss of data integrity, confidentiality, and/or availability.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.1.6: Disable Universal Plug and Play - UPnP.
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.1.6 to configure: Disable Universal Plug and Play - UPnP.
Свойства
- Операционные системы
- Любая
- Теги
- mfdprinter
- Источник
- CIS Multi-Function Device Benchmark v1.0.0 - 2.1.6 Disable Universal Plug and Play - UPnP