Security Researchers Expose Weak Encryption in Canon Enterprise Printers

Summary

During a network security assessment, security researchers discovered that Canon enterprise printers configured with default administrator credentials could be exploited to extract domain credentials. The printers' "encrypted" communication was found to use a weak XOR-based obfuscation scheme rather than true encryption, allowing attackers with administrative access to easily decrypt stored credentials. The article highlights how enterprise printers represent a significant but often overlooked attack surface, and how what vendors label as "encryption" may not provide real security.