[SOLVED] Accessing the BIOS on a HP Printer.

[NuclearDad]

Are you guys aware of any way to access the BIOS on a HP Printer? I been told that there is password associated with the BIOS. The specific printer of concern is the HP LaserJet Enterprise M553.

 

[rgd1101]

what do you mean bios on the printer? was exactly are you trying to do?

 

[hotaru.hino]

There's no "BIOS" to access per se.

Normally such printers are either serviced from its web page (put in its IP address into the browser's address bar) or from the console on the printer itself.

 

[NuclearDad]

Like a computer's BIOS, is there a BIOS on the printers that can be used to access the internal configuration. I'm being asked if that's a potential attach pathway.

 

[rgd1101]

you mean potential cyber attack? sure. anything is possible
there are firmware on it.

 

[hotaru.hino]

Like a computer's BIOS, is there a BIOS on the printers that can be used to access the internal configuration. I'm being asked if that's a potential attach pathway.

Again, either the printer would have a web interface you can log into or there's a console on the printer itself you can use to access its configuration.

 

[USAFRet]

Like a computer's BIOS, is there a BIOS on the printers that can be used to access the internal configuration. I'm being asked if that's a potential attach pathway.

While not though a "BIOS", printers can and do have externally exploitable vulnerabilities.

https://blog.malwarebytes.com/explo...d-by-three-critical-security-vulnerabilities/
https://www.csoonline.com/article/3654279/vulnerabilities-found-in-250-hp-printer-models.html
https://www.dell.com/community/Viru...ecurity-flaw-may-affect-millions/td-p/7984863
https://threatpost.com/brother-printers-susceptible-to-remote-denial-of-service-attacks/128790/

 

[hotaru.hino]

For the sake of clarifying terminology as well, in PCs, the "BIOS" is essentially the motherboard's firmware. Printers also have firmware, with more advanced ones allowing you to configure certain settings.

I've already mentioned how to configure that, so I won't sound like a broken record.

 

[USAFRet]

And for further clarity:

"a potential attach pathway. "
Actually means:
"a potential attack pathway. "

Correct?