HP Reveals Security Flaw (and Update) Impacting Multiple Laser Printers


You should promptly update the firmware of your HP laser printer.

HP has issued a [security update](https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007) that addresses three security vulnerabilities impacting various LaserJet models. The company reports that these weaknesses could facilitate Remote Code Execution and Elevation of Privilege during the handling of a PostScript print job. Although HP has not disclosed extensive information, the potential hazards are significant. Thankfully, firmware updates are available to resolve the problem.

The models of the affected printers can be found on HP’s security update page. Given the large number of models, it’s advisable to verify if your printer is among those affected. Most of the devices affected seem to be designed for enterprise use.

HP has classified the vulnerabilities based on their severity: one is Critical, another is High, and the last is Medium. If you possess one of these printers, applying the firmware update should be your highest priority.

Experiencing a hack via a printer would be quite embarrassing—so take steps to prevent it.