CyberRota Analysis
AI-GeneratedHP Deskjet 2800 Series Printers with firmware version TBP1CN2612AR or earlier have a missing authorization vulnerability in their embedded webserver, allowing unauthenticated attackers with network access to exploit multiple exposed administrative API endpoints. This can lead to the exposure of sensitive configuration data, including plaintext Wi-Fi Direct credentials and unique device identity information. Organizations using these printers should prioritize patching to mitigate the risk of unauthorized access and potential network compromise.
Original NVD Description
A missing authorization vulnerability exists in the embedded webserver of HP Deskjet 2800 Series Printers running firmware version <=TBP1CN2612AR. An unauthenticated attacker with network access can send GET requests to multiple exposed administrative API endpoints and retrieve sensitive configuration data such as plaintext Wi‑Fi Direct credentials, unique device identity information, and other administrative security state details. When accessed through the web interface, these setting pages explicitly require administrator credentials before sensitive information is displayed.