HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jetadmin | Hp | 4.0 (including) | 4.0 (including) |
| Jetadmin | Hp | 4.1.2 (including) | 4.1.2 (including) |
| Jetadmin | Hp | 5.1 (including) | 5.1 (including) |
| Jetadmin | Hp | 5.5 (including) | 5.5 (including) |
| Jetadmin | Hp | 5.5.177 (including) | 5.5.177 (including) |
| Jetadmin | Hp | 5.6 (including) | 5.6 (including) |
| Jetadmin | Hp | 6.0 (including) | 6.0 (including) |
| Jetadmin | Hp | 6.1 (including) | 6.1 (including) |
| Jetadmin | Hp | 6.2 (including) | 6.2 (including) |