jetlib.sec » Tags » hp-printers

Feeds

133371 items (6 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines (4 unread)
• Packet Storm Security Advisories (2 unread)
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

30 items tagged "hp printers"

Related tags: default security [+], vulnerability [+], senders [+], printers [+], network [+], malware [+], jonathan voris [+], hp firmware [+], firmware [+], digital [+], chaos communication congress [+], digital senders [+], robots [+], robotic arm [+], researcher [+], pad [+], nes [+], hp digital sender [+], hacks [+], game pad [+], game [+], finds [+], cybersecurity [+], code execution [+], bruno [+], security [+], hpsbpi [+], bulletin [+], potential security vulnerability [+]

• April 26, 2012
• 15:31

  HP Security Bulletin HPSBPI02728 SSRT100692 6

   » ‎ Packet Storm Security Advisories
  HP Security Bulletin HPSBPI02728 SSRT100692 6 - In November, 2011, a potential security vulnerability was identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. This revision, version 6, of the Security Bulletin announces the availability of firmware updates for additional devices.

  Tags:  potential-security-vulnerability hp-printers digital-senders  

• 12:08

  Bugtraq: [security bulletin] HPSBPI02728 SSRT100692 rev.6 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

   » ‎ SecurityFocus Vulnerabilities
  [security bulletin] HPSBPI02728 SSRT100692 rev.6 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

  Tags:  security hpsbpi bulletin hp-printers digital-senders default-security  

• 0:00

  Vuln: HP Printers and Digital Senders Remote Firmware Update Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  HP Printers and Digital Senders Remote Firmware Update Security Bypass Vulnerability

  Tags:  digital senders printers hp-printers digital-senders vulnerability  

• March 29, 2012
• 15:22

  [Video] Print Me If You Dare

   » ‎ SecDocs
  Authors: Ang Cui Jonathan Voris
  Tags: hardware hacking
  Event: Chaos Communication Congress 28th (28C3) 2011
  Abstract: Network printers are ubiquitous fixtures within the modern IT infrastructure. Residing within sensitive networks and lacking in security, these devices represent high-value targets that can theoretically be used not only to manipulate and exfiltrate the sensitive information such as network credentials and sensitive documents, but also as fully functional general-purpose bot-nodes which give attackers a stealthy, persistent foothold inside the victim network for further recognizance, exploitation and exfiltration. We first present several generic firmware modification attacks against HP printers. Weaknesses within the firmware update process allows the attacker to make arbitrary modifications to the NVRAM contents of the device. The attacks we present exploit a functional vulnerability common to all HP printers, and do not depend on any specific code vulnerability. These attacks cannot be prevented by any authentication mechanism on the printer, and can be delivered over the network, either directly or through a print server (active attack) and as hidden payloads within documents (reflexive attack). In order to demonstrate these firmware modification attacks, we present a detailed description of several common HP firmware RFU (remote firmware update) formats, including the general file format, along with the compression and checksum algorithms used. Furthermore, we will release a tool (HPacker), which can unpack existing RFUs and create/pack arbitrary RFUs. This information was obtained by analysis of publicly available RFUs as well as reverse engineering the SPI BootRom contents of several printers. Next, we describe the design and operation a sophisticated piece of malware for HP (P2050) printers. Essentially a VxWorks rootkit, this malware is equipped with: port scanner, covert reverse-IP proxy, print-job snooper that can monitor, intercept, manipulate and exfiltrate incoming print-jobs, a live code update mechanism, and more (see presentation outline below). Lastly, we will demonstrate a self-propagation mechanism, turning this malware into a full-blown printer worm. Using HPacker, we demonstrate the injection of our malware into arbitrary P2050 RFUs, and show how similar malware can be created for other popular HP printer types. Next, we demonstrate the delivery of this modified firmware update over the network to a fully locked-down printer. Lastly, we present an accurate distribution of all HP printers vulnerable to our attack, as determined by our global embedded device vulnerability scanner (see [1]). Our scan is still incomplete, but extrapolating from available data, we estimate that there exist at least 100,000 HP printers that can be compromised through an active attack, and several million devices that can be compromised through reflexive attacks. We will present a detailed breakdown of the geographical and organizational distribution of observable vulnerable printers in the world. *We have also unpacked several engine-control processor firmwares (different from the main SoC) and are currently attempting to locate code related to tracking dots. Perhaps we will have some results by December. In any case, HPacker will help the community to do further research in this direction, possibly allowing us to spoof / disable these yellow dots of burden.

  Tags:  malware network firmware jonathan-voris chaos-communication-congress hp-printers hp-firmware  

• 15:07

  [Audio] Print Me If You Dare

   » ‎ SecDocs
  Authors: Ang Cui Jonathan Voris
  Tags: hardware hacking
  Event: Chaos Communication Congress 28th (28C3) 2011
  Abstract: Network printers are ubiquitous fixtures within the modern IT infrastructure. Residing within sensitive networks and lacking in security, these devices represent high-value targets that can theoretically be used not only to manipulate and exfiltrate the sensitive information such as network credentials and sensitive documents, but also as fully functional general-purpose bot-nodes which give attackers a stealthy, persistent foothold inside the victim network for further recognizance, exploitation and exfiltration. We first present several generic firmware modification attacks against HP printers. Weaknesses within the firmware update process allows the attacker to make arbitrary modifications to the NVRAM contents of the device. The attacks we present exploit a functional vulnerability common to all HP printers, and do not depend on any specific code vulnerability. These attacks cannot be prevented by any authentication mechanism on the printer, and can be delivered over the network, either directly or through a print server (active attack) and as hidden payloads within documents (reflexive attack). In order to demonstrate these firmware modification attacks, we present a detailed description of several common HP firmware RFU (remote firmware update) formats, including the general file format, along with the compression and checksum algorithms used. Furthermore, we will release a tool (HPacker), which can unpack existing RFUs and create/pack arbitrary RFUs. This information was obtained by analysis of publicly available RFUs as well as reverse engineering the SPI BootRom contents of several printers. Next, we describe the design and operation a sophisticated piece of malware for HP (P2050) printers. Essentially a VxWorks rootkit, this malware is equipped with: port scanner, covert reverse-IP proxy, print-job snooper that can monitor, intercept, manipulate and exfiltrate incoming print-jobs, a live code update mechanism, and more (see presentation outline below). Lastly, we will demonstrate a self-propagation mechanism, turning this malware into a full-blown printer worm. Using HPacker, we demonstrate the injection of our malware into arbitrary P2050 RFUs, and show how similar malware can be created for other popular HP printer types. Next, we demonstrate the delivery of this modified firmware update over the network to a fully locked-down printer. Lastly, we present an accurate distribution of all HP printers vulnerable to our attack, as determined by our global embedded device vulnerability scanner (see [1]). Our scan is still incomplete, but extrapolating from available data, we estimate that there exist at least 100,000 HP printers that can be compromised through an active attack, and several million devices that can be compromised through reflexive attacks. We will present a detailed breakdown of the geographical and organizational distribution of observable vulnerable printers in the world. *We have also unpacked several engine-control processor firmwares (different from the main SoC) and are currently attempting to locate code related to tracking dots. Perhaps we will have some results by December. In any case, HPacker will help the community to do further research in this direction, possibly allowing us to spoof / disable these yellow dots of burden.

  Tags:  malware network firmware jonathan-voris chaos-communication-congress hp-printers hp-firmware  

• March 19, 2012
• 15:42

  HP Security Bulletin HPSBPI02728 SSRT100692 5

   » ‎ Packet Storm Security Advisories
  HP Security Bulletin HPSBPI02728 SSRT100692 5 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 5 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 15:42

  HP Security Bulletin HPSBPI02728 SSRT100692 5

   » ‎ Packet Storm Security Recent Files
  HP Security Bulletin HPSBPI02728 SSRT100692 5 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 5 of this advisory.

  Tags:  potential-security-vulnerability hp-printers digital-senders  

• 15:42

  HP Security Bulletin HPSBPI02728 SSRT100692 5

   » ‎ Packet Storm Security Misc. Files
  HP Security Bulletin HPSBPI02728 SSRT100692 5 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 5 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 9:00

  Bugtraq: [security bulletin] HPSBPI02728 SSRT100692 rev.5 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

   » ‎ SecurityFocus Vulnerabilities
  [security bulletin] HPSBPI02728 SSRT100692 rev.5 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

  Tags:  security hpsbpi bulletin hp-printers digital-senders default-security  

• 0:00

  Vuln: HP Printers and Digital Senders Remote Firmware Update Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  HP Printers and Digital Senders Remote Firmware Update Security Bypass Vulnerability

  Tags:  digital senders printers hp-printers digital-senders vulnerability  

• February 17, 2012
• 19:14

  HP Security Bulletin HPSBPI02728 SSRT100692 4

   » ‎ Packet Storm Security Advisories
  HP Security Bulletin HPSBPI02728 SSRT100692 4 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 4 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 19:14

  HP Security Bulletin HPSBPI02728 SSRT100692 4

   » ‎ Packet Storm Security Recent Files
  HP Security Bulletin HPSBPI02728 SSRT100692 4 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 4 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 19:14

  HP Security Bulletin HPSBPI02728 SSRT100692 4

   » ‎ Packet Storm Security Misc. Files
  HP Security Bulletin HPSBPI02728 SSRT100692 4 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 4 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 9:00

  Bugtraq: [security bulletin] HPSBPI02728 SSRT100692 rev.4 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

   » ‎ SecurityFocus Vulnerabilities
  [security bulletin] HPSBPI02728 SSRT100692 rev.4 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

  Tags:  security hpsbpi bulletin hp-printers digital-senders default-security  

• 0:00

  Vuln: RETIRED: HP Printers and HP Digital Sender Firmware Update Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RETIRED: HP Printers and HP Digital Sender Firmware Update Remote Code Execution Vulnerability

  Tags:  hp-digital-sender hp-printers code-execution  

• 0:00

  Vuln: HP Printers and Digital Senders Remote Firmware Update Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  HP Printers and Digital Senders Remote Firmware Update Security Bypass Vulnerability

  Tags:  hp-printers digital-senders vulnerability  

• January 09, 2012
• 12:58

  HP Security Bulletin HPSBPI02728 SSRT100692 3

   » ‎ Packet Storm Security Advisories
  HP Security Bulletin HPSBPI02728 SSRT100692 3 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 3 of this advisory.

  Tags:  potential-security-vulnerability hp-printers digital-senders  

• 12:58

  HP Security Bulletin HPSBPI02728 SSRT100692 3

   » ‎ Packet Storm Security Recent Files
  HP Security Bulletin HPSBPI02728 SSRT100692 3 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 3 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 12:58

  HP Security Bulletin HPSBPI02728 SSRT100692 3

   » ‎ Packet Storm Security Misc. Files
  HP Security Bulletin HPSBPI02728 SSRT100692 3 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 3 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 7:00

  Bugtraq: [security bulletin] HPSBPI02728 SSRT100692 rev.3 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

   » ‎ SecurityFocus Vulnerabilities
  [security bulletin] HPSBPI02728 SSRT100692 rev.3 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

  Tags:  security hpsbpi bulletin hp-printers digital-senders default-security  

• December 29, 2011
• 15:29

  HP Security Bulletin HPSBPI02728 SSRT100692 2

   » ‎ Packet Storm Security Advisories
  HP Security Bulletin HPSBPI02728 SSRT100692 2 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 2 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 15:29

  HP Security Bulletin HPSBPI02728 SSRT100692 2

   » ‎ Packet Storm Security Recent Files
  HP Security Bulletin HPSBPI02728 SSRT100692 2 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 2 of this advisory.

  Tags:  potential-security-vulnerability hp-printers digital-senders  

• 15:29

  HP Security Bulletin HPSBPI02728 SSRT100692 2

   » ‎ Packet Storm Security Misc. Files
  HP Security Bulletin HPSBPI02728 SSRT100692 2 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 2 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 9:00

  Bugtraq: [security bulletin] HPSBPI02728 SSRT100692 rev.2 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

   » ‎ SecurityFocus Vulnerabilities
  [security bulletin] HPSBPI02728 SSRT100692 rev.2 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

  Tags:  security hpsbpi bulletin hp-printers digital-senders default-security  

• December 01, 2011
• 13:32

  HP Security Bulletin HPSBPI02728 SSRT100692

   » ‎ Packet Storm Security Advisories
  HP Security Bulletin HPSBPI02728 SSRT100692 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 1 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 13:32

  HP Security Bulletin HPSBPI02728 SSRT100692

   » ‎ Packet Storm Security Recent Files
  HP Security Bulletin HPSBPI02728 SSRT100692 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 1 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 13:32

  HP Security Bulletin HPSBPI02728 SSRT100692

   » ‎ Packet Storm Security Misc. Files
  HP Security Bulletin HPSBPI02728 SSRT100692 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 1 of this advisory.

  Tags:  hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders  

• 11:00

  Bugtraq: [security bulletin] HPSBPI02728 SSRT100692 rev.1 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

   » ‎ SecurityFocus Vulnerabilities
  [security bulletin] HPSBPI02728 SSRT100692 rev.1 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

  Tags:  security hpsbpi bulletin hp-printers digital-senders default-security  

• February 13, 2011
• 7:01

  NES game pad guided robotic arm

   » ‎ Hack a Day
  Instructables user [Bruno] sent in his most recent creation, a robotic arm controlled using an old NES game pad. He scavenged the majority of his parts from a pair of old HP printers, including motors pulleys, belts and more. In fact, most of the metal and plastic components that he used come from the old [...]

  Tags:  game nes pad bruno hp-printers game-pad robotic-arm robots hacks  

• September 01, 2010
• 0:00

  Cybersecurity Researcher Finds Scanning Flaw In HP Printers

   » ‎ Packet Storm Security Headlines
  Cybersecurity Researcher Finds Scanning Flaw In HP Printers

  Tags:  researcher cybersecurity finds hp-printers