Jump to content
Matt

HP LaserJet Credential Disclosure / Missing Authentication

Recommended Posts

Description :

This is the malicious javascript for the Firefox 0-day created to target Tor users leveraging the .onion sneaker net. The shellcode is supposedly neutered but test at your own risk.

Author : Michal Sajdak

Source : HP LaserJet Credential Disclosure / Missing Authentication ? Packet Storm

Code :

Some of the networked HP LaserJet printers have hidden URLs hardcoded in the firmware. The URLs are not authenticated and can be used to extract admin password in plaintext – among other information like WiFi settings (including WPS PIN).

Models affected:

HP LaserJet Pro P1102w, HP LaserJet Pro P1606dn, HP LaserJet Pro CP1025nw, HP LaserJet Pro M1212nf MFP, HP LaserJet Pro M1213nf MFP, HP LaserJet Pro M1214nfh MFP, HP LaserJet Pro M1216nfh MFP, HP LaserJet Pro M1217nfw MFP, HP LaserJet Pro M1218nfs MFP, Possibly others(?)

URLs details:

Here are at least two interesting URLs, which can be accessed without authentication:

http://IP_ADDRESS/dev/save_restore.xml
(gives admin password/configuration parameters in plaintext)

http://IP_ADDRESS:8080/IoMgmt/Adapters/wifi0/WPS/Pin
(gives WPS PIN in plaintext)

Original disclosure:
http://sekurak.pl/hp-laserjet-pro-printers-remote-admin-password-extraction/

Original information from HP:
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%253Demr_na-c03825817-1%257CdocLocale%253D%257CcalledBy%253D&javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&ac.admitted=1375697666155.876444892.199480143

History

19.04.2013 vendor notified
19.04.2013 initial vendor response received
24.04.2013 issue confirmed
26.07.2013 new firmwares released
31.07.2013 issues summary published by vendor
02.08.2013 disclosure

--
Michal Sajdak, Securitum

Link to comment
Share on other sites

Matt mai las-o in slbz frate, au dreptate unii cand spun ca exagerezi. Nu crezi ca 5 stiri pe zi ajung? Sau 5 stiri la 3 ore?

Nu e problema ta ce postez eu.Nu vorbi daca nu ma cunosti, cand am fost intrebat de tine, desi nu te cunosteam am vorbit ok.

// Inteleg ca iti place sa vezi Feed plin de posturi la Off-Topic cum a fost tot weekend-ul , dar te rog sa eviti asemenea discutii.Iti place intri nu iti place nu intri si nu comentezi.

Link to comment
Share on other sites

De cand imi dai tu mie ordine ce sa fac si ce nu? Apropo imi dai voie sa postez, plzzzzzzzz? Vezi ca iti permiti cam multe. Si vezi ca intelegi prost, nu imi place sa vad posturi de kkt la off-topic sau in alta parte, dar tu prea exagerezi frate. Btw de ce te ataci asa cand iti zice cineva ceva? Nu te supara, dar ai o problema, care se mareste de pe o zi pe alta. Mai iesi frate la o cafea, un covrig ceva. Du-ti femeia la cinema(daca ai), mai iesi afara din casa, ca nu e bine ce faci. Prieteneste ti-o spun si din experienta propie.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...