• ×
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
  • ×
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
Guidelines
The HP Community is where owners of HP products, like you, volunteer to help each other find solutions.
Archived This topic has been archived. Information and links in this thread may no longer be available or relevant. If you have a question create a new topic by clicking here and select the appropriate board.
HP Recommended
Microsoft Windows 7 (32-bit)

Hi, We get a weekly security audit and have been advised of the following security issue at bottom of this post. It advises no FTP password is set for FTP printing and to set a password.

 

What I have tried so far unsuccessfully:

1. Turn of FTP Printing on all printers

2. Update all firmware on all printer to the latest

 

I was hoping the above would work but now trying again to do the reports specific recommendation to set an FTP password but cannot find anywhere on HTTP admin panel, google or HP support a way to set an FTP password on these printers?

 

Can anyone point me help please before next weeks security scan as I'd love to fix this issue! Thanks in advance.

 

 

Problem:

 

HP Printer FTP Access [FID 738] 0.0 Medium

Description:

The Hewlett-Packard printer FTP printing facility allows for anyone to submit print jobs to the printer.

Regulatory Finding:

PCI 6.1: The Payment Card Data Security Standard strongly suggests creating a procedure to process, identify and weight security vulnerabilities according to their associated

risk based on well-known security information sources.

Recommendation:

Access the printer Telnet or HTTP administration page and set a password for the FTP printing service.

Observation:

Many Hewlett-Packard network printers provide an FTP printing facility that allows for remote submission of print jobs to the printer using a standard FTP client.

By default no password is set for this facility. If no password is set, it is possible to remotely submit print jobs in any size or quantity thus possibly disrupting legitimate usage

of the printer.

 

1 REPLY 1
HP Recommended

I believe that if you have set the Administrator password for the device from the web console (EWS page), then FTP access is secured.  Printer will not print a job submitted through FTP, unless user has logged in successfully.

Please mark the post that solves your problem as Accepted Solution
Click the 'Kudos Thumbs Up' if this was helpful. Thank You!

(Although I am an HP employee, I am speaking for myself and not for HP)
Archived This topic has been archived. Information and links in this thread may no longer be available or relevant. If you have a question create a new topic by clicking here and select the appropriate board.
† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the <a href="https://www8.hp.com/us/en/terms-of-use.html" class="udrlinesmall">Terms of Use</a> and <a href="/t5/custom/page/page-id/hp.rulespage" class="udrlinesmall"> Rules of Participation</a>.