It was observed that Sharp printers are vulnerable to a listing of session cookies without authentication. Any attacker can list valid cookies by visiting a backdoor webpage and use them to authenticate to the printers. sessionlist.html and sys_trayentryreboot.html are accessible with no authentication.