toggle

AAPL Stock: 111.22 ( + 1.53 )

Printed from http://www.macnn.com

HP claims LaserJet exploit 'sensational,' plans fix

updated 05:25 pm EST, Tue November 29, 2011

Deny forced firmware update can cause fires

HP has issued a statement claiming that reports of a major LaserJet security exploit was "sensational and inaccurate." The company emphatically claimed that speculation that devices could catch fire due to a firmware change are false. While downplaying the risk, HP is, at the same time, working on a firmware fix for the problem.

Talk of physically damaging the printers through hacks was both unreported and technically impossible, HP said. Each LaserJet has a thermal breaker, a protective device designed to prevent a printer's fuser from overheating or potentially causing a fire. There has been some speculation that, due to a security issue, the breaker could be compromised by an unauthorized firmware upgrade, causing the printer to burst into flames.

The security threat was real, however. A printer on a public network or directly linked to the Internet without a firewall is vulnerable to malicious firmware pushed to the printer. It's also possible, in the instance of Linux or Mac environments, for a specially formatted corrupt print job to trigger a firmware upgrade. HP insisted that no such breaches have happened so far.

HP didn't say when the firmware upgrade would be available. In the meantime, they are recommending to LaserJet owners that they placing printers behind a firewall, which includes most home routers. They also suggest, where possible, disabling the remote firmware upload capability on an exposed printer.




by MacNN Staff

POST TOOLS:

TAGS :

toggle

Comments

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

Follow us on Facebook

toggle

Most Popular

Advertisement

Recent Reviews

ZTE Spro 2 Smart Projector

Home theaters are becoming more and more accessible these days, but maybe you've been a bit wary about buying a home projector. And h ...

MSI Geforce GTX 970 100ME

When Nvidia announced a new line of video cards in September 2014, many people thought things would continue to be business as usual i ...

Wren V5US Wireless Sound System

If you're a music fanatic, chances are you are, by extension, a bit fanatical about what you listen to your music on. If you're like ...

toggle

Most Commented