Enterprise printers and multi-function peripherals (MFPs) are full-fledged network devices with web servers, hard drives storing print jobs, and often administrative access with default credentials. Security testing covers: default credential exposure, print job interception and retrieval, network access from the printer (can it be used as a pivot point?), firmware vulnerability assessment, LDAP integration security, and print management server security. Printers are consistently one of the most overlooked attack surfaces in enterprise environments.
Technical
Print Infrastructure Security: Testing Printers, MFPs, and Print Management Systems for Australian Enterprises
Enterprise printers store documents, have network access, and often have default credentials. A frequently overlooked attack surface. Guidance for AU market.