Kyocera 3830 (aka FS-3830N) printers have a back door that allows remote attackers to read and alter configuration settings via strings that begin with !R!SIOP0, as demonstrated using (1) a connection to to TCP port 9100 or (2) the UNIX lp command.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fs-3830n | Kyocera | * | * |
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html
- http://evader.wordpress.com/2006/02/16/kyocera-printers/
- http://secunia.com/advisories/18896
- http://www.osvdb.org/23245
- http://www.securityfocus.com/bid/16685
- http://www.vupen.com/english/advisories/2006/0620
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24772
- http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html
- http://evader.wordpress.com/2006/02/16/kyocera-printers/
- http://secunia.com/advisories/18896
- http://www.osvdb.org/23245
- http://www.securityfocus.com/bid/16685
- http://www.vupen.com/english/advisories/2006/0620
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24772