Scan causing unexpected printing on Toshiba Copier/Modify Scans

Vulnerability Tests
2

Answering this question currently requires some additional background on printer scans and why this is happening:

  1. Generally a Full and Fast scan excludes a known and previous detected printer from a scan by default. Scanning a printer requires the setting Exclude printers from scan in the following VT set to no:

    Global variable settings (OID: 1.3.6.1.4.1.25623.1.0.12288)

    As noted previously this requires that the printer is detected. If you havn’t changed this setting then it is very likely that the printer wasn’t detected at all, please see the end of this posting for some more information for this case.

  2. Most printers are exposing one or more specific PJL / Raw printing ports (TCP) which are often configurable by the user. Every VT and/or nmap service probe sending some data to the PJL / Raw printing port(s) will cause your printer to print out the data sent to it.

To avoid the situations of 2. the following VT:

Do not print on AppSocket and socketAPI printers (OID: 1.3.6.1.4.1.25623.1.0.12241)

tries to exclude some common known ports (namely 9100-9107 and 9112-9116) if a printer was detected.

Depending on your printer and the exposed ports you might need to add / update the ports to exclude in that VT.

It could be also possible that this VT is not detecting your printer at all (See 1. above). Then we could update it to detect it, for this every info like:

  • Full printer type
  • HTTP/FTP/Telnet banner
  • HTML code of the start page
  • SNMP SysDesc

etc. could help.

2 Likes