I have booted up a brand new printer and me being curious I checked out it's web-interface by typing its IP address in the URL. Poking around, I notice a few things.
There is no password set for administrator account. I can go to the tab and it will say "Administrator password : Not set" (explains why I cant find a login to admin button...)
Overall weak configuration of protocols and such. I am not yet a master of all the basic protocols (but getting there, any sites you found useful would greatly be appreciated. I've been using Wikipedia) but clicking through all the settings for the protocols they were all configured without passwords and next to no security.
My question is the following:
If a company did this with their printer; rolled it in, powered it up and left it there, how dangerous would it be to the network it's connected to, if somebody found a way to exploit it? Also does the type of printer (MFP, Scanner, General printer) change how dangerous it is?