More than HP printer models vulnerable to two very critical vulnerabilities

by Hilbert Hagedoorn on: 08/07/2018 08:31 AM | source: myce | 6 comment(s)

Over a hundred HP inkjet printers are vulnerable to remote code execution vulnerabilities that are classified by HP as critical. By exploiting the vulnerabilities, an attacker could remotely execute arbitrary code by sending a specially prepared file.

There are two vulnerabilities that are both classified with a severity of 9.8 out of 10. By sending a maliciously crafted file to a vulnerable device, attackers can trigger a buffer overflow and then remotely execute arbitrary code repors myce today. HP has made firmware updates available. Owners of HP PageWide Pro, DesignJet, OfficeJet, Deskjet and Envy series printers should check this page to see if their exact model is affected. They should then download firmware updates that patch the vulnerabilities from the HP website.

HP urges users to install the updates as soon as possible, as the company writes, ” The information in this security bulletin should be acted upon as soon as possible.”

Related Stories

PUBG Bans More Than 80,000 Cheaters - 11/07/2017 10:01 AM
A while ago a new set of Anti-Cheat Measures was embedded into the popular online game PlayerUnknown&rsquo;s Battlegrounds (PUBG), numbers have now surfaced and as it seems the developer succes...

AMD Ends Crossfire For More Than 2 GPUs – Now Calls It mGPU - 09/25/2017 09:29 AM
If you noticed last week&rsquo;s driver release, you might have been a bit puzzled about the fact that the word Crossfire has not been used, while the driver itself was exactly about bringing that...

Oculus Rift To Cost More than $350 - 10/05/2015 08:50 AM
Oculus Founder Palmer Luckey has given us a new minimum for the still unannounced Oculus Rift price. In an interview roadtovr asked Luckey if the consumer Oculus Rift price would come in around tha...

Steam Now has more than 100 Million Active Accounts - 09/24/2014 09:25 AM
Valve announced that there are over 100 million active Steam accounts. That's like approaching the population of Mexico right? The press release announcing today's store update also notes that 1,300...

Cheapest Haswell-E CPU will cost little more than a 4790 - 08/27/2014 08:35 AM
Later this week Intel is to announce the Intel Core i7 Haswell-E platform. Leaked data surfaced on the web and it shows that the cheapest Haswell-E CPU will cost little more then a 4790, 389 USD whic...

2 pages 1 2

fantaskarsef
Senior Member

Posts: 11800
Joined: 2014-07-21

#5571548 Posted on: 08/07/2018 08:36 AM

I'm not sure I understand correctly but... to send a prepared file, the attacker has to be either in the printer's network, or the PC's network the printer is hooked up to. Okay, so far so good (my printer doesn't even have WLAN so it's just an USB printer, no danger here).
Then again, what does that really mean? What could they do with a hacked printer? Not print my files?

TheDeeGee
Senior Member

Posts: 6748
Joined: 2010-08-28

#5571573 Posted on: 08/07/2018 10:05 AM

I bet the update also breaks unofficial cartridges.

Ill pass, since i only turn on my printer when i need to print.

Glidefan
Don Booze

Posts: 12517
Joined: 2000-05-23

#5571575 Posted on: 08/07/2018 10:09 AM

sverek
Don Booze

Posts: 6099
Joined: 2011-01-02

#5571576 Posted on: 08/07/2018 10:09 AM

Hacking someones printer to spam dickbutts until they run out of paper could be pretty hilarious.

slyphnier
Senior Member

Posts: 770
Joined: 2009-11-30

#5571605 Posted on: 08/07/2018 11:51 AM

like printer processor have high computing power to do "things"
in the first place its output-device anyway, so even it hacked what it can do will be really limited

2 pages 1 2

Post New Comment

Click here to post a comment for this news story on the message forum.