Chapter 5 - Security Updates And Service Packs; Honeywell Sysinfo Power Tool; To View System Information - Honeywell dolphin 70e black Network And Security Manual

5
Security Updates and Service Packs
One of the common weaknesses of system management as reported by, Open Web Application Security Project (OWASP) is
"not keeping software up to date." It is critical to keep the latest patches and software versions on your Dolphin 70e with Android
and supporting devices in the Dolphin 70e Black network. This is especially true for software that has reported Common
Vulnerabilities and Exposures (CVE). The MITRE Corporation and the National Institute of Standards and Technology (NIST)
track CVEs and mark their level of criticalness. For example, when a critical vulnerability was found in the popular OpenSSL®
cryptographic software in April of 2014, the TLS heartbeat read overrun (CVE-2014-0160) was tracked and marked by both
organizations. A CVE such as the CVE-2014-0160 must be addressed as soon as possible.
Honeywell provides system updates for both security and feature-related purpose. If the third-party software has been installed,
Honeywell recommends testing the update on a non-production system to ensure Honeywell software continues to operate
correctly.
Attention: Before installing any critical updates or making any system changes, ALWAYS back up the system. This will
provide a safe and efficient recovery path if the update fails. See the
Utility, page 4-1.
Additional Resources
Security Resources
The MITRE Corporation
National Institute of Standards and Technology (NIST)
Open Web Application Security Project (OWASP)
U.S. National Vulnerability Database (NVD)

Honeywell SysInfo Power Tool

The SysInfo Power Tool provides a read-out of important system information including firmware versions, application versions,
system parameters, service pack versions, as well as network and radio information for your Dolphin 70e Black device.

To View System Information

From the Home screen, select All apps > Power Tools. Touch the SysInfo icon once. SysInfo queries the system, com-
piles the data and displays it on the SysInfo screen.
You cannot edit information in SysInfo. This information is gathered from the Dolphin terminal and changes only when the
terminal's configuration has changed.
Note: Refer to the Dolphin Power Tools for devices powered by Android User's Guide for detailed information on the SysInfo
Power Tool. Product guides are available for download at www.honeywellaidc.com.
Honeywell Backup and Restore Power Tool
http://www.mitre.org and http://cve.mitre.org
http://www.nist.gov
http://www.owasp.org
http://nvd.nist.gov
5 - 1