HP patches remote exploit bug in enterprise printers

By

Over 50 models affected by flaw reported in August.

HP has issued firmware updates for a vulnerability in several of its business and enterprise printers that could be abused to run arbitrary code remotely.

HP patches remote exploit bug in enterprise printers
HP's M553n.

The issue was first discovered by NTT Security as part of security analysis of HP's MFP-586 and the M553 printers.

The firm found HP did not sufficiently validate parts of dynamic link libraries, which the researchers exploited to create malware that could be remotely installed on the printers.

HP LaserJet Enterprise, PageWide Enterprise, LaserJet Managed and OfficeJet Enterprise printers are all affected by the security issue.

NTT Security reported the remote code execution vulnerability to HP in August this year.

The company this week issued updated firmware that fixes the flaw. It rated the vulnerability as high.

iTnews has contacted HP for comment on why the patches took three months to develop and release.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © iTnews.com.au . All rights reserved.
Tags:

Most Read Articles

Ex-student charged over Western Sydney University cyberattacks

Ex-student charged over Western Sydney University cyberattacks

Home Affairs officer accessed data on "friends and associates"

Home Affairs officer accessed data on "friends and associates"

SA Water plans 'once-in-a-generation' core technology uplift

SA Water plans 'once-in-a-generation' core technology uplift

Sportsbet recruits 'security champions' in shift-left strategy

Sportsbet recruits 'security champions' in shift-left strategy

Log In

  |  Forgot your password?