advertisement
Forums

The Forum is sponsored by 
 

AAPL stock: Click Here

You are currently viewing the Tips and Deals forum
HP all-in-ones: Hackable via Fax-(gets hacker inside the network printer is on)
Posted by: Winston
Date: October 22, 2018 05:44PM
This sounds unbelievable, but HP has issued firmware updates to fix it:
HP all-in-ones which support color faxing can be hacked via a fax connection. The hacker then has access to the network the printer is on.


[securityaffairs.co]
Quote
Security Affairs wrote:
A critical vulnerability potentially exposes millions of HP OfficeJet printers to hack, according to the experts at Check Point the attackers only need to send a fax to the vulnerable printers.

The researchers discovered two critical vulnerabilities in HP’s implementation of a widely used fax protocol implemented in all its OfficeJet all-in-one inkjet printers.

The vulnerabilities affect the HP all-in-one printers that support Group 3 (G3) fax protocols that are part of the ITU T.30 standard for sending and receiving color faxes.
. . .

“Two security vulnerabilities have been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack or static buffer overflow, which could allow remote code execution.” reads the security advisory published by HP.


List of affected HP all-in-one printers here:
[support.hp.com]

It's a long list . . .


Good luck.

- Winston



------------------------
Be seeing you.



Edited 2 time(s). Last edit at 10/22/2018 07:13PM by Winston.
Options:  Reply • Quote
Re: HP all-in-ones: Hackable via Fax
Posted by: hal
Date: October 22, 2018 05:50PM
So... you wanna take control of my FAX???

Go ahead...
Options:  Reply • Quote
Re: HP all-in-ones: Hackable via Fax
Posted by: Winston
Date: October 22, 2018 07:11PM
Quote
hal
So... you wanna take control of my FAX???

Go ahead...


Not quite. Read the link. It's a back door into your network. The hack can you inside of a network printer, and from there into the network. Which is why I said it sounds unbelievable.


Good luck.

- Winston



------------------------
Be seeing you.
Options:  Reply • Quote
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 72
Record Number of Users: 186 on February 20, 2020
Record Number of Guests: 5122 on October 03, 2020