HP Inc. has issued firmware updates for multiple security vulnerabilities that affect more than 150 models of its multifunction printer (MFP) products.
These issues are not particularly easy to exploit. However, they present a threat to enterprise organizations because they give attackers a means to steal data and gain a foothold on a network, according to F-Secure researchers who discovered the bugs and reported them to HP in April 2021.
The flaws are also dangerous because forensic tools are not typically capable of recovering evidence from multi-function printers. An attacker who wanted to maintain stealth could exploit the flaws and leave very little evidence behind, F-Secure said. more here