Networked printers, copiers, and all-in-one devices can be managed from their control panels and built-in web servers. When such devices are delivered, they usually have a manufacturer-specific default password (or none at all). If this password is not changed or none is set, a device can be accessed very easily.

Many organisations also use common passwords for all their printers and all-in-one devices are rarely change them. As a result, they are often known to many internal and external persons, which makes it easy for unauthorised third parties to access the devices.

In addition, printers and all-in-one devices can be reset to factory settings via boot menus. This also affects their security settings. For example, the device password often no longer exists after a printer or all-in-one device has been reset to its factory settings. Unprotected boot menus simplify administration, but reduce security at the same time.

Printers, copiers, and all-in-one devices are equipped with numerous network protocols. All these protocols are usually activated on delivery. This could allow attackers, for example, to access the device settings and modify them to extract sensitive information from the network.

Many devices can transfer their control panel to a support representative via the network. However, this can also be used to read confidential entries made by users on the control panel.

Larger organisations usually have multiple printers, copiers, and all-in-one devices. Device management software is often used to manage and monitor them efficiently. However, many organisations do not adequately protect this software from unauthorised access because it is perceived as a less critical system. This allows individual or all devices to be changed unintentionally or deliberately.