Fax exploit vulnerability

[mascan42]

Fax machines could be the next target for hackers, researchers warn

Has anybody heard anything about this? A customer brought it to my attention today, and he was in a panic about having a network-connected fax. Is this something that should be handled by just updating to the latest firmware, or is there something specific that needs to be done? Or is it just more needless panic spread by the MSM?

[SalesServiceGuy]

Re: Fax exploit vulnerability

The vulnerability is limited to specific HP fax machines and MFPs. HP reacted quickly and eliminated the vulnerability with new firmware before the report was published.

HPSBHF03589 rev. 4 - HP Ink Printers Remote Code Execution | HP(R) Customer Support


Of course, if one is not aware of the vulnerability and one does not update the firmware on HP fax machines/ MFPs the vulnerability is still there.

There are no indications that any other brand of fax/ MFP is vulnerable to attack by fax line.

Many manufacturers offer fax boards that are separate options installed within the copier with the specific security intent to block any possible network attack via TCP/IP.

There is a trend among manufacturers to reduce costs by integrating the fax board function onto the main board of the MFP. This trend is at odds with those customers who care about IEEE P2600.1 security standards like banks and gov't agencies.

[NeoMatrix]

Re: Fax exploit vulnerability

Re :Hacking Printer and fax hardware
You might like to watch the following MotherBoard youtube channel video
Start around the 4:00 min mark if you're in hurry.

Are you sitting down.... ?

hhttps://www.youtube.com/watch?v=5GnMj5cus4A

Another hack using smart phones.
hhttps://www.youtube.com/watch?v=dysnKiXUlRU