This security scandal proves that the default password must always be changed

Cybersecurity researchers have identified eight major flaws in more than 700 printers. In addition, By exploiting the vulnerabilities, it is possible to guess the default password of the machines.

Rapid7 researchers discovered a series of Eight vulnerabilities In more than 700 models of printers sold on the market. For example, Experts explain that these breaches threaten the security of printers, users and all their devices.

Read also: Faille in Canon – How these printers can lead to cyber attacks

748 Touched printers models – This security scandal proves default new

These. In addition, are “748 models of 5 suppliers who are affected”explains Rapid7 in his report. Meanwhile, Most affected references (689) are Sold by Brothera large company of Japanese origin which operates in more than 40 countries. Consequently, There are also 53 other printers models marketed by brands like this security scandal proves default new Fujifilm, Ricoh, Toshiba and Konica Minolta. Similarly,

Among this security scandal proves default the flaws identified. Therefore. there is a breach qualified as « grave » which concerns the way in which passwords secure the printers management software are generated. Nevertheless, The default passwords are made in the factory From the serial numberthanks to an algorithm specific to companies. In addition, The flaw allows you to understand how this algorithm works. In addition, manage to guess the password of a printer with its serial number. According to the researchers, the algorithm is simply too basic. THE process is always the same. The algorithm takes the first 16 characteristics of the device’s serial number and adds a small series of numbers. Additionally, The result is mixed through the Sha256 encryption protocol, before being converted into legible letters. Finally, he only keeps the first 8 characters and replaces some with special symbolslike @ or #, to complicate the password a little.

As the report this security scandal proves default explains. the attacker is able “Get the serial number from the targeted device” by several means. and by exploiting the other deceived faults. Combined, vulnerabilities therefore allow take control of a printer. From there, the attacker can compromise other devices connected to the same network as the machine. Thread by needle, the hacker can take a variety of terminals and connected objects.

“If an unauthenticated striker manages to obtain the serial number of the device, he can deduce the default password. He will then be able to connect to the printer with administrator rights. provided that this password has not been modified by the user ”details Rapid7 in a technical analysis published in stride.

Read also: The pilots of these printers are infested with viruses

This security scandal proves this security scandal proves default new default new

This security scandal. proves default

What to do to. protect your printer?

Alerted by researchers. the Brother company recognizes that this critical vulnerability of this security scandal proves default algorithm “Cannot be completely corrected. via a software update”. The Japanese firm will therefore achieve “A change in the manufacturing process of all the models concerned”. On the other hand, the other faults pinned by Rapid7 have been corrected through an update. Brother, Konica Minolta, Fujifilm, Ricoh and Toshiba. All companies have published detailed instructions on their website.

If you use an affected brands printer, you are highly recommended Change the default password emergency. This can easily be fanned by hackers. Opt for a complex password of more than 12 characters, which combines figures, letters and symbols. Finally, we advise you to get into the habit of systematically changing the password of a device. By keeping the default code generated by this security scandal proves default new the company, you put in danger all of the devices on your network. This new affair reminds us.

🔴 To not miss any 01net news, this security scandal proves default follow us on Google News and Whatsapp.

Source : Rapid7