HP JetDirect Printer SNMP JetAdmin Device Password Disclosure Vulnerability
BID:7001
Info
HP JetDirect Printer SNMP JetAdmin Device Password Disclosure Vulnerability
| Bugtraq ID: | 7001 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 03 2003 12:00AM |
| Updated: | Mar 03 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Sven Pechler <[email protected]>. |
| Vulnerable: |
HP JetDirect 300.0 X HP JetDirect J3263A HP JetDirect J3113A HP JetDirect J3111A HP JetDirect J3110A HP JetDirect J2591A HP JetDirect J2552B HP JetDirect J2552A |
| Not Vulnerable: | |
Discussion
HP JetDirect Printer SNMP JetAdmin Device Password Disclosure Vulnerability
A problem with JetDirect printers could make it possible for a remote user to gain administrative access to the printer.
It has been reported that HP JetDirect printers leak the web JetAdmin device password under some circumstances. By sending an SNMP GET request to a vulnerable printer, the printer will return the hex-encoded device password to the requester. This could allow a remote user to access and change configuration of the printer.
A problem with JetDirect printers could make it possible for a remote user to gain administrative access to the printer.
It has been reported that HP JetDirect printers leak the web JetAdmin device password under some circumstances. By sending an SNMP GET request to a vulnerable printer, the printer will return the hex-encoded device password to the requester. This could allow a remote user to access and change configuration of the printer.
Exploit / POC
HP JetDirect Printer SNMP JetAdmin Device Password Disclosure Vulnerability
The following proof of concept was supplied:
C:\>snmputil get example.printer public .1.3.6.1.4.1.11.2.3.9.1.1.13.0
The following proof of concept was supplied:
C:\>snmputil get example.printer public .1.3.6.1.4.1.11.2.3.9.1.1.13.0
Solution / Fix
HP JetDirect Printer SNMP JetAdmin Device Password Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
HP JetDirect Printer SNMP JetAdmin Device Password Disclosure Vulnerability
References:
References: