Is this another security issue for MFPs?
Forescout Cybersecurity published new report on 9 new security vulnerabilities in some IoT devices
- Vulnerabilities in the communications protocols used by millions of Internet of Things (IoT) and operational technology (OT) devices could allow cyber attackers to intercept and manipulate data.
- vulnerabilities in some TCP/IP stacks have been detailed by cybersecurity researchers at Forescout, who've dubbed the set of nine new vulnerabilities as 'Number:Jack'.
- TCP/IP stacks found to contain the vulnerabilities include several open-source stacks analysed in Forescout's previous study, including uIP, FNET, picoTCP, Nut/Net, cycloneTCP and uC/TCP-IP.
- Vulnerabilities have also been discovered in Siemens' Nucleus NET, Texas Instruments' NDKTCPIP and Microchip's MPLAB Net.
- (this may impact MFP manufacturers that outsource their code, and is similar to vulnerabilities that were found in MFPs that use Treck Software)