Last month we have published a article which was saying that HP LaserJet Printers have serious security flaws. Columbia University Researchers have discovered a vulnerability in some Hewlett-Packard (HP) LaserJet printer lines that could allow attackers to install a modified firmware to steal information, run attacks from within a network or cause physical damage to the printer.
The exploit made known in the report was based on HP LaserJet printers that allow firmware upgrades through a "Remote Firmware Update" process. Because the printers don't verify the source, and because firmware updates don't come packed with a signature, anyone can send a virus-laden document to the printer which would instruct the printer to erase its current firmware and install a malware-laced version. Hackers can even do this on printers configured to accept print jobs via the Internet.
Once news of a potential hacker-ignited fire began to circulate, HP quickly retaliated to the Columbia University finding, stating that a potential fire stemming from a firmware change was false. "HP LaserJet printers have a hardware element called a 'thermal breaker' that is designed to prevent the fuser from overheating or causing a fire," HP said in a statement. "It cannot be overcome by a firmware change or this proposed vulnerability."
On December 23, HP issued a news release reiterating that no customers had reported unauthorised access to their LaserJet printers, and offered a firmware update that the company said would ''mitigate this issue''. The update is available on the company's support website, in the ''Drivers'' category.
LINK TO OUR HOME PAGE :


Categories:
security-news
,
technews
,
vulnerablity