16-year-old bug in printer software gives hackers admin rights

guest · Jul 20, 2021

16-year-old bug in printer software gives hackers admin rights
July 20, 2021
https://www.bleepingcomputer.com/ne...-printer-software-gives-hackers-admin-rights/

A 16-year-old security vulnerability found in an HP, Xerox, and Samsung printers driver allows attackers to gain admin rights on systems using the vulnerable driver software.

"This high severity vulnerability, which has been present in HP, Samsung, and Xerox printer software since 2005, affects hundreds of millions of devices and millions of users worldwide," according to a SentinelOne report published today and shared with BleepingComputer in advance.
The security flaw tracked as CVE-2021-3438 is a buffer overflow in the SSPORT.SYS driver for specific printer models that could lead to a local escalation of user privileges.

As the researchers discovered, the buggy driver automatically gets installed with the printer software and will be loaded by Windows after each system reboot.
Click to expand...

"While we haven't seen any indicators that this vulnerability has been exploited in the wild up till now, with hundreds of millions of enterprises and users currently vulnerable, it is inevitable that attackers will seek out those that do not take the appropriate action."
Users urged to update ASAP
A list of affected printer models using the vulnerable driver can be found in HP's security advisory and this Xerox security mini bulletin.

HP, Xerox, and Samsung enterprise and home customers are urged to apply the patches provided by the two vendors as soon as possible.
Click to expand...

CVE-2021-3438: 16 Years In Hiding – Millions of Printers Worldwide Vulnerable

Executive Summary

SentinelLabs has discovered a high severity flaw in HP, Samsung, and Xerox printer drivers.

Since 2005 HP, Samsung, and Xerox have released millions of printers worldwide with the vulnerable driver.

SentinelLabs’ findings were proactively reported to HP on Feb 18, 2021 and are tracked as CVE-2021-3438, marked with CVSS Score 8.8.

HP released a security update on May 19th to its customers to address this vulnerability.

Click to expand...

itman · Jul 20, 2021

HP, Xerox, and Samsung enterprise and home customers are urged to apply the patches provided by the two vendors as soon as possible.
Click to expand...

According to the HP advisory, a few HP LaserJet models but many Samsung models are affected.

Log in or Sign up

16-year-old bug in printer software gives hackers admin rights

guest Guest

itman Registered Member

Log in or Sign up

16-year-old bug in printer software gives hackers admin rights

guest Guest

itman Registered Member

Useful Searches