Disable Universal Plug and Play - UPnP

中级别 1人工审核printer

说明

UPnP is designed to create a distributed plug-and-play environment over an IP network for the purpose of automatic device discovery, notification, and configuration. It is recommended that UPnP capabilities be disabled to reduce risk introduced by vulnerabilities that are exposed via this mechanism. If the UPnP capabilities of the MFD are mis-configured, a malicious entity may alter the MFD’s configuration which may lead to loss of data integrity, confidentiality, and/or availability.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.1.6: Disable Universal Plug and Play - UPnP.

修复方式

修复方法: 操作指南或基础设施补丁

Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.1.6 to configure: Disable Universal Plug and Play - UPnP.

属性

操作系统: 任意
标签: mfdprinter
参考: CIS Multi-Function Device Benchmark v1.0.0 - 2.1.6 Disable Universal Plug and Play - UPnP