Vulnerability
vulnerability:internet_exposed_printer
Also: exposed printer, printer vulnerability
Security condition in which printer services are reachable from the public internet without adequate authentication or encryption.
Security condition in which printer services are reachable from the public internet without adequate authentication or encryption.
“your printer is exposed to the internet. [00:20:00] Please fix that.”
“There’s no authentication or encryption”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | network printer | Explicit | 31 |
| incoming | INITIAL_ACCESS_VIA | printer exploitation incident | Derived | 31 |
internet-exposed printer AFFECTS network printer
Internet-exposed printers can receive print commands from anywhere; port 9100 had no authentication or encryption in the described setup.
Explicit Confidence 99% · Jack Rhysider EP 31 Details
“There’s no authentication or encryption; you simply send your PDF file to the port with the command to print”
printer exploitation incident INITIAL_ACCESS_VIA internet-exposed printer
The printer incident gained access through printers exposed to the public internet, especially those with port 9100 open.
Derived Confidence 96% · Jack Rhysider EP 31 Details
“if these ports were exposed to the internet it may mean that someone can print to that machine from anywhere in the world”