Infosecurity pros know that anything that connects to the Internet can be a security risk unless properly configured. This week they were reminded of that when a security researcher warned that business laser printers with hard drives have to be behind the corporate firewall or risk being used as anonymous FTP servers for hackers.
In particular, he warned administrators with Hewlett-Packard business printers to ensure port 9100 is plugged. Administrators with other networked business printers in their systems have to check the devices’ documentation to see which port is used and has to be secured.
“There are a few free, open source pieces of software that can be used to upload and interact with HP printer hard drives over port 9100,” Chris Vickery 
Six tips for controlling printers
HP told the site its latest printers include security features such as HP Sure Start BIOS protection, Run-time Intrusion Detection and firmware whitelisting.
It also said the exposure can be prevented either by disabling the PostScript PJL/PS filesystem commands or using the more secure protocol IPPS (Internet Print Protocol over /messagent.php?ID=7ty7ADtEXp_4Znyes_d7x8O7PaopTb0hNnpdK7sm09pGib4lll58XQl1X4zT9hj1zWdmTSvGu4_GLQyFzZ&SOURCE=60bb0cae-d897-b49e-9bc8-4c9a28d2b9bd&REF=WPL” onclick=”_gaq.push([‘_trackEvent’, ‘Asset’, ‘Article Page Click’, ‘379843 – HP’]);”>
Sponsor: HP
HPE Security Research: Cyber Risk Report 2015
In a world where more and more people and devices connect to the Internet, greater focus must be placed on security and privacy. The past year has seen the manifestation of several vulnerabilities that gathered a storm of media attention.
Register Now
