"Use these fields to set or change the Administrator Password. When set, the Administrator Password is required before you can access and change configuration parameters. To disable the Administrator Password, leave the entries blank."

  • 日期:2017-11-24
  • 类别:
  • 作者:Ankit Anubhav
  • 语法:"Use these fields to set or change the Administrator Password. When set, the Administrator Password is required before you can access and change configuration parameters. To disable the Administrator Password, leave the entries blank."
  • The following Google search gives output of HP printers whose authentication
    is not set. Hence an attacker can simply visit the links from the dork
    outputto set Administrator Password .

    "Use these fields to set or change the Administrator Password. When set, the
    Administrator Password is required before you can access and change
    configuration parameters. To disable the Administrator Password, leave the
    entries blank."

    Once the password is set, the attacker gets admin access to the HP printer.
    This can be used to cause disruption.

    Ankit Anubhav, NewSky Security