Description
Kyocera 3830 (aka FS-3830N) printers have a back door that allows remote attackers to read and alter configuration settings via strings that begin with "!R!SIOP0", as demonstrated using (1) a connection to to TCP port 9100 or (2) the UNIX lp command.
References
- kyocera-fs3830n-no-auth(24772) vdb-entry
- 20060215 Kyocera Network Printers mailing-list
- 23245 vdb-entry
- ADV-2006-0620 vdb-entry
- http://evader.wordpress.com/2006/02/16/kyocera-printers/
- 16685 vdb-entry
- 18896 third-party-advisory