TMAegis
printer için daha fazla kural

TMA-PRINTER-ADMIN-PASSWORD

Ensure the default administrator password has been changed

KritikDüzey 1Manuel incelemeprinter

Açıklama

Multifunction printers ship with blank or published default admin credentials (often printed in the manual or derived from the serial number). Default credentials give full control of network settings, stored jobs, address books and firmware.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings): confirm an administrator password is set and differs from the vendor default (try the documented default, e.g. blank, 'admin', '1111', 'x-admin' or the serial number, and expect it to be rejected). Also check the control-panel/service PIN and the SNMP write community. Confirm the password is unique per device and stored in the password vault; prefer LDAP/Kerberos-backed admin accounts where supported.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

EWS: Security > General Security / Account management > set a unique, strong (15+ chars) administrator password; change the device service/control-panel PIN; restrict admin sign-in to directory-backed accounts where supported. Fleet: push via the vendor fleet tool (HP Web Jetadmin / Security Manager, Xerox CentreWare, Ricoh Streamline NX).

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
printerauthenticationdefault-credentials
Referans
CIS Multi-Function Device Benchmark v1.0.0 - Change default administrator password (verify section number for your release)