HP Officejet 7610 - SNMP Agent Default Community Name (public)

[Texican74]

I need to change some settings on a HP Officejet 7610 in order to resolve the vulnerability listed below:

CAT I - SNMP Agent Default Community Name (public)

The solution is listed below:

Disable the SNMP service on the remote host if you do not use it. Either filter incoming UDP packets going to this port, or change the default community string.

I logged in to the printer's EWS in an attempt to rename the Community Name (public) to something else but the EWS does not have the option to make that change.

I am not sure where else to lok to make the required changes. Is there another way to make the changes if the EWS does not have the option?

Any assistance would be helpful. Thanks

[Drakster]

Hi @Texican74,

Thank you for reaching out to the HP Support Forums! 

I understand that you're trying to make your printer and network more secure. I would be happy to help you and please remember to return to this thread and mark 'Accept as Solution', if I have successfully helped you resolve the issue. If you wish to say 'thanks' for my effort to help, click the 'thumbs up' to give me a Kudos.

The printer is as secure as your network. The ESW does not have this type of setting. The port on the computer could be re-configured. You would need to consult your router manufacturer for help with the port settings on the router.

In order to assist you better, I may require more information.

Please explained what you're trying to accomplish and what prompted this? 

I don't believe you have anything to be concerned about when it comes to security and hacking with your printer.

That being said, I can provide you the list of ports that need to remain open for the printer to function correctly on your network. 

Incoming and Outgoing Printer Ports:

• Incoming (UDP) ports: 137, 138, 161, 427
• Outgoing (TCP) ports: 137, 139, 427, 9100, 9220, 9500

The ports are used for the following functions:

Printing

• UDP ports: 427, 137, 161
• TCP port: 9100

Photo card upload

• UDP ports: 137, 138, 427
• TCP port: 139

Scanning

• UDP port: 427
• TCP ports: 9220, 9500

HP device status

• UDP port: 161

Faxing

• UDP port: 427
• TCP port: 9220

HP device installation

• UDP port: 427

Web Services Ports

• UDP and TCP: 80, 443, 5222, and 5223

Bonjour Ports

• UDP and TCP: 5353, 5297, and 5298

Source posted by my colleague @VisionAiry. 

In addition, you could switch the printer port on the computer and uncheck "SNMP Status Enabled". 

1. Locate and open Devices and Printers.

2. Right click on your printer icon and choose Printer Properties.

3. Click on the Ports tab along the top of the page.

4. Click on the Add Port... button.

5. If you have the option for HP Standard TCP/IP Port, select it otherwise just select the Standard TCP/IP Port.

6. Click the New Port... button.

7. Click Next > button in the wizard. 

8. Enter your printers current IP address from your Network Configuration page. Note: The Port Name will auto-populate. I would recommend putting a check mark in the box; Always print to this device, even if it's IP address changes.

9. Click Next > button in the wizard.

10. Click the Finish button.

11. This may take you back to this Printer Ports window,

12. Select the port you configured and click Configure Port. 

13. Uncheck SNMP Status Enabled.

14. Then Click OK and Apply in the Properties Window. 

If you need further assistance, please let me know the following information above. Any information you can provide would be appreciated.

I hope this information is helpful. Please respond to this post with the results. Good Luck! 

[Texican74]

Thank you Drakster for your reply, it is much appreciated.

So what I am trying to accomplish is to either Disable SNMP or change the default community name. Both of which can usually be done through the EWS of most printers. HP decided to not do that on this model. The options are there on the printer they are just not visible.

What prompted this is the organization were I work wants this "SNMP Agent Default Community Name (public)" issue fixed. The Security department wants this fixed in order to avoid having the printer blocked. I need to disable SNMP or change the community name to something other than public.

I attempted the steps you listed on the lower half of your post; but, how does changing the name on the computer change it on the printer SNMP setting? I was a bit confused.

I don't know what else to try other than Web Jetadmin and that is a software with lots of issues too. Yet it might be my only hope.

Any other suggestions are totally welcomed. Thanks for all your time and assistance, it is much appreciated.

[Drakster]

Hi @Texican74,

Thanks for the response.

These are the only settings that match what you're talking about, that I'm aware of.

Perhaps you should speak to your IT Dept. in regards to this request. Following my steps on each computer should accomplish the same results.

I hope this helps clear up any confusion. Thanks for reaching out to the HP Support Forums! Good luck! 🙂