Description
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging.
References
- 19971004 HP Laserjet 4M Plus DirectJet Problem mailing-list
- laserjet-unpassworded(1876) vdb-entry