Multi function printers (MFP) are common in enterprises. Connected to the LAN, interacting with AD, they are often not included in SOC monitoring sources, even though they handle confidential documents and can serve as stealthy persistence means.

This presentation will cover our research on exploiting thee Xerox MFP lines: WorkCentre, AltaLink and VersaLink, exposing critical vulnerabitilies and giving a few tips on how to secure them.