SMB1 turned off in latest security update

[rthonpm]

Re: SMB1 turned off in latest security update

Since we're all going to be dealing with this issue for awhile, here's a list compiled by Microsoft's head of storage of any systems and software that have a documented need for SMB1: https://blogs.technet.microsoft.com/...clearinghouse/

[NeoMatrix]

Re: SMB1 turned off in latest security update

Since we're all going to be dealing with this issue for awhile, here's a list compiled by Microsoft's head of storage of any systems and software that have a documented need for SMB1: https://blogs.technet.microsoft.com/...clearinghouse/

Yes the malware/viralware software an associated corrupted hardware will not go away anytime soon. It's a positive to see the mechanical only Techs taking the first initial steps to work with those in I.T. software side of the machine industry.

Unfortunately it's a necessary marriage of will an ego's, which I'm sure will continue for some time into the future,whether we like it or not...

[copier tech]

Re: SMB1 turned off in latest security update

It appears Ricoh have recently released various firmware updates for the Metis C2 with the Android panels to support SMB 2/3.

I only found this out by chance from a "readme" file while researching another issue.


SMB v2 + V3 Support.pdf

[slimslob]

Re: SMB1 turned off in latest security update

It appears Ricoh have recently released various firmware updates for the Metis C2 with the Android panels to support SMB 2/3.

I only found this out by chance from a "readme" file while researching another issue.


[ATTACH]37231[/ATTACH]

Looks like the information text file that is zipped with the firmware.

[PrintWhisperer]

Re: SMB1 turned off in latest security update

FYI regarding Kyocera and SMB. Currently, SMB2 is BROKEN and will fail on most MFP series (3551ci/2552ci) ONLY when using any subfolder in the Address book 'PATH' field.

This was first seen prior to Wanna Cry in NetApp storage appliances which tended to force SMB2 for share transactions. Windows was at that time largely unaffected.



Kyocera expanded the SMB support from simple SMB1 ONLY in 3551ci V4 firmware to add 2 SMB2 dialects and 1 SMB3 in v5.

However, the API which parses the PATH field is broken, and it duplicates the path field (all folders appear twice in the path) when actually forming the IOCTL SMB2 Create File request. The MFP fails with an 1102 error due to PATH NOT FOUND.

This can only be seen in a Wireshark capture.

FIXES are:

1) Scan only to root of SMB2 shares, do not use sub-folders in the Address Book Path only the sharename
2) Load v4 firmware, which only supports SMB1
3) Obtain a patch from Kyocera which forces the Scan to folder to use SMB1 when SMB2 fails 3 times (GL, only a few people are even aware this exists)

The first v6 release was to have fixed this issue, but as of v6.02A the problem is the same as it was in v5 with no change.