2325 matches found
Session fixation
Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an administrative menu via a telnet session...
CVE-2006-0789
Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an administrative menu via a telnet session...
CVE-2006-0789
CVE-2006-0789 affects unspecified Kyocera printers that ship with a default admin account with a blank password. The vulnerability enables remote unauthenticated access to an administrative menu via telnet. No specific affected models, firmware versions, or root-cause details are provided in the ...
CVE-2006-0788
Kyocera 3830 aka FS-3830N printers have a back door that allows remote attackers to read and alter configuration settings via strings that begin with "!R!SIOP0", as demonstrated using 1 a connection to to TCP port 9100 or 2 the UNIX lp command...
Multiple Lexmark printers software security vulnerabilities
Remote unauthorized access and local privilege escalation with different printer software components...
CUPS Empty UDP Datagram DoS Vulnerability
The target is running a CUPS server that supports browsing of network printers and that is vulnerable to a limited type of denial of service attack. Specifically, the browsing feature can be disabled by sending an empty UDP datagram to the CUPS server. SPDX-FileCopyrightText: 2004 George A. Theal...
Do not scan printers
The host seems to be a printer. The scan has been disabled against this host. SPDX-FileCopyrightText: 2005 by Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2005-2988
The records indicate CVE-2005-2988 affects HP LaserJet 2430 and other printers using Jetdirect controls. The issue is that recently printed documents are stored without proper protection, enabling potential disclosure of sensitive information over SNMP. The impact is described as PARTIAL confiden...
CVE-2004-2439
CVE-2004-2439 concerns the remote upgrade capability in HP LaserJet 4200 and 4300 printers, described as not requiring a password and allowing remote firmware upgrades. The affected component is the printer firmware upgrade mechanism. Per HP guidance, a practical remediation is to disable remote ...
CVE-2002-1796
ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services...
CVE-2004-1110
The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file...
DEBIAN-CVE-2004-1110
The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file...
CVE-2004-2439
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware...
CVE-2004-1110
The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file...
CVE-2004-1110
The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file...
CVE-2004-1110
The CVE concerns mtink status monitor for Epson printers; versions prior to 1.0.5 allow local users to overwrite arbitrary files via a symlink attack on the Epson temporary file. Root cause: insecure temporary file handling. Impact: local integrity impact. Mitigation: upgrade to 1.0.5 or later.
Denial of Service vulnerability in several Lexmark HTTP servers
Denial of Service vulnerability in several Lexmark HTTP servers. Several Lexmark network printers is shipped with a build-in HTTP server for administrative tasks. The webserver software is vulnerable to a Denial of Service attack that will force the webserver to restart and/or stop taking request...
Re: HP Web JetAdmin vulnerabilities.
Just a few more for HP Web JetAdmin 6.5 - I'm tired of waiting for HP and since the current version is way past 6.5, there is no point in hiding it any more : ---SNIP--- Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 ++-+ Title Multiple vulnerabilities in HP Web JetAdmin Authors FX...
Do not scan printers
The remote host appears to be a network printer, multi-function device, or other fragile device. Such devices often react very poorly when scanned. To avoid problems, Nessus has marked the remote host as 'Dead' and will not scan it, beyond minimal probing traffic that allows the scanner to identi...