0

I ran a security scan using the home version of Nessus by following a post on LifeHacker, and I was told that my printer had two security errors:

  1. OpenSSL 'ChangeCipherSpec' MiTM Vulnerability
  2. SNMP Agent Default Community Name (public)

Seeing as this is a network printer, I cannot set up advanced systems, and turning off SNMP (or changing any settings) is no longer an option in its online config menu.

I am a total security noob, so I thought I would ask this community whether this endangers my home network, and what I can do about it?

5
  • 1
    Please tell us how the printer is or might be reachable from any untrusted network, including the Internet. In particular, as seen from the Internet, is the printer squarely behind a firewall?
    – user
    Oct 28, 2016 at 14:10
  • 1
    Are we talking about your home network or your workplace?
    – HashHazard
    Oct 28, 2016 at 14:43
  • @Hollowproc one would hope that an employee isn't running Nessus at work after reading a Lifehacker article, but it is good to check this assumption ...
    – schroeder
    Oct 28, 2016 at 20:39
  • @schroeder yea I think we've all been burned by assumptions
    – HashHazard
    Oct 30, 2016 at 16:45
  • Sorry for the belated reply, This is a home network. I just saw those warning and whated to check with this community Dec 6, 2016 at 22:38

1 Answer 1

1

If you cannot disable SNMP protocol can you at least rename the community string and give it a strong password? If so that should suffice.
Regarding the OpenSSL vulnerability that would have to be resolved by the vendor with a firmware update. See if one is available.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .