The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer.Referenceshttp://www.securityfocus.com/bid/3132http://www.securityfocus.com/archive/1/201160