HP warning of remotely exploitable Laser Printer bug
Hewlett-Packard on Friday issued an urgent support notification to registered HP LaserJet printer owners warning of a vulnerability that could allow hackers unauthorized access to 50 product lines.
HP said in an email that no reports have been made of the affected printers being accessed through the vulnerability, but pointed owners of LaserJet-branded printers to a list of affected products and instructions for fixing the bug on its tech support site.
Not a lot of details about the vulnerability were disclosed though it may be possible to remotely install unauthorized printer firmware on the affected LaserJet products "on a public Internet without a firewall, or for LaserJet devices in a private network, if a malicious effort is made by a party on the private network to modify the firmware of the device.", HP says.