Fuji Xerox ApeosPort - Default Login

ID: fuji-xerox-default-login

Severity: high

Author: Morgan Robertson

Tags: default-login,fuji,fuji-xerox,printer

Description

This template checks for the default credentials (username: 11111, password: x-admin) on Fuji Xerox ApeosPort series printers. If the credentials are valid, the response will have a 200 HTTP status code. Tested on a Fuji Xerox ApeosPort-V C2275 T2.

YAML Source

id: fuji-xerox-default-login

info:
  name: Fuji Xerox ApeosPort - Default Login
  author: Morgan Robertson
  severity: high
  description: |
    This template checks for the default credentials (username: 11111, password: x-admin) on Fuji Xerox ApeosPort series printers. If the credentials are valid, the response will have a 200 HTTP status code. Tested on a Fuji Xerox ApeosPort-V C2275 T2.
  reference:
    - https://4it.com.au/kb/article/fuji-xerox-default-password/
  classification:
    cpe: cpe:2.3:h:fujixerox:apeosport-v_c3375:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: fujixerox
    product: apeosport-v_c3375
    fofa-query: '"prop.htm" && "docucentre"'
  tags: default-login,fuji,fuji-xerox,printer

http:
  - raw:
      - |
        GET /prop.htm HTTP/1.1
        Host: {{Hostname}}
        Authorization: Basic MTExMTE6eC1hZG1pbg==
        Connection: close

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Configuration Overview"
          - "Description"
          - "System Administrator Settings"
        condition: and

      - type: status
        status:
          - 200
# digest: 490a004630440220277a7f3eae7f568325e3e3ff1748384224365d79ec9b39a2d1b2621ae98f7b12022048dec3f3c72049107f1d7f9a5daa4853fb747a3c33bbc390d2110981b8fdcc30:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/default-logins/fuji-xerox/fuji-xerox-default-login.yaml"

View on Github