Faxploit: Hundreds of Printers Putting Businesses at Risk of Malware

Schedule a Discovery Call
Alert_Blog

Page Content

Printers, along with every other piece of equipment that is on your network, require careful configuration and regular upkeep to ensure that they aren’t putting your data and users at risk. Security researchers recently discovered two massive vulnerabilities in HP Officejet All-in-One printers that make it incredibly easy for hackers to spread malware and gain access to a company’s network.

 

What You Need to Know About Faxploit

Faxploit is a series of vulnerabilities found in all models of HP Officejet All-in-One printers that allows an attacker to hijack the printer using only a fax number. Once the attacker gains control of the printer, they can elevate privileges across the network and access data or spread malware, such as notorious threats like WannaCry, Cryptowall, and more.

 

If your company’s fax number is listed publicly and you have an HP Officejet All-in-One printer, your network is at immediate risk. The vulnerabilities also apply to a massive list of other HP inkjet printers, including the HP Envy, HP Deskjet, HP DesignJet, HP PageWide Managed, HP PageWide Pro, HP Photosmart, HP AMP, HP Ink Tank, HP Smart Tank Wireless, and the aforementioned HP Officejet series.

 

It’s Strongly Recommended That Patches Are Applied

HP has released patches for these vulnerabilities and users are recommended to apply firmware updates. Succurri clients who have a managed services agreement covering your network will be receiving these patches on an ongoing basis. If your business utilizes HP printers and you don’t have a managed contract or you aren’t sure if updates are being proactively applied, we strongly encourage you to immediately reach out to us to have your printers evaluated.

 

It’s also likely that other devices on your network may be out of date, so fully auditing your entire network for outdated firmware and missing security patches is a good idea. It’s important to remember that everything can appear to be working fine, but the doors could be wide open for threats to sneak in.

 

Additionally, Succurri can help you proactively monitor and detect threats that attempt to breach your network using real-time, enterprise-level security solutions. With today’s cybersecurity landscape presenting increasingly massive threats to small businesses, doing all you can to protect your data is important. Call us today at (206) 590-3312 for more information.

cover

Learn how to do some amazing things with computers

A little introduction to doing stuff with computers that you wouldn’t know without reading this book.
Subscribe
Schedule a Call with Us

You’ll be able to select a time to discuss any IT support needs with us.

Schedule a Discovery Call
Sarah W
Sarah W.

Phoenix Consultant

More Articles

Have you checked that your IT provider has a valid MSSP certification? Read more about

Outsourcing has become a common practice across all companies, but it’s important to understand why

The construction industry faces unique challenges when it comes to maintaining reliable and efficient communication

Secure Your Free Spot Today!

Submit a new Support Ticket