At least 150 HP brand models are vulnerable to an attack. This has been discovered by a security consultancy. Attackers could take control of the printers, steal information or infiltrate networks.
The vulnerability has been detected in the network communications module of the devices and can be exploited by physically connecting to the device and then executing the exploits.
The most effective method found includes tricking a legitimate user into visiting a malicious website, that exposes information related to the vulnerable printer. This malicious website would print a document with hidden malicious information within the code, giving the attacker access.
Once inside, the attacker would already have access to the information received by the printer, including access credentials as well as the documents that are printed.
Hasta ahora, The solution involves limiting access to these devices, configuring a specific VLAN for these devices, follow the manufacturer's safety instructions and keep the printer area under CCTV surveillance.
Fountain: HelpNet Security
Image: Pixabay