Printer security covers vulnerabilities in networked devices, exposed interfaces, stored documents, and access controls that can affect data confidentiality.
Search across headline titles and summaries.
Background for this topic.
A printer converts digital documents or images into physical output; networked multifunction printers may also scan, copy, fax, and store temporary job data. In an enterprise, such a device is an endpoint with firmware, an operating system, network services, and often an administrative web interface.
Security concerns include unauthorized administration through exposed or weakly protected interfaces, exploitation of unpatched firmware or services, and disclosure of documents retained in queues, internal storage, or printed output. Organizations should restrict printer management to trusted networks, change default credentials, apply vendor firmware updates, use encrypted management and print protocols where supported, and limit stored job data. Access-controlled release printing can reduce exposure of sensitive pages. When printers are relocated or retired, stored jobs, address books, credentials, and configuration data should be securely erased; logs and device details may also matter during vulnerability management and investigations.
Weekly headline count for the current query.
Fiery Driver Version Didn't Validate Source File, Had Hardcoded CredentialsPrinter servers from major manufactures such as Canon and Sharp could be susceptible to a supply chain hack due to flaws in a driver updater, researchers warn. Cyderes said Wednesday it identified two major security risks in a version of the Fiery Driver Updater.
Also, O Canada, Oh Brother and More Probable Chinese HackingThis week, ransomware kills, Salt Typhoon hit Canada, Russian backdoors, SAP and Citrix patches, China hackers in the oil and energy sector. Brother printers have an unfixable flaw. Ransomware hit a U.S. dairy cooperative. Hackers in Albania and Oxford. European lawmakers heard cybersecurity advice.
Critical Vulnerability in Drivers Affects Multiple Canon PrintersThe office printer could mete out more than ordinary frustration now that researchers discovered a vulnerability in drivers for Canon printer enabling attackers to execute arbitrary code. The flaw is an out-of-bounds vulnerability in Enhanced Metafile Recode processing.
Exploitation Requires Victim to Print On Rogue PrinterAttackers can exploit a series of vulnerabilities in the OpenPrinting Common Unix Printing System utility to remotely execute arbitrary code on certain machines. Major Linux distributions reacted Friday by releasing patches. Exploitation requires a victim to attempt to print from a malicious device.
Path Traversal Flaw Allows Malicious Actors to Exploit Kyocera's Device ManagerResearchers found a path traversal vulnerability in Kyocera's Device Manager product, which is used for overseeing large printer fleets in mid- to large-sized enterprises. Attackers could exploit the flaw to obtain NTLM hashes by changing the location of a backup database.