Vulnerabilities found in HP multi-function printers

Researchers at F-Secure have discovered vulnerabilities in more than 150 HP multifunction printer (MFP) products. These could allow attackers to seize control of vulnerable devices, steal information, and further infiltrate networks to inflict other types of damage. HP has issued patches to address the vulnerabilities which include exposed physical access port vulnerabilities (CVE-2021-39237) and font parsing vulnerabilities (CVE-2021-39238). Researchers discovered the problems in the HP MFP M725z -- part of HP's FutureSmart line of printers. However, security advisories published by HP list over 150 different products affected by the vulnerabilities. Attackers could trick a user from a targeted organization into… [Continue Reading]