HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging.
https://exchange.xforce.ibmcloud.com/vulnerabilities/1876