Patch on way 'this week' for HP printer vulns

Sysadmins have been advised to watch for a coming HP printer firmware update that will plug a remote code execution vulnerability (among others) in its MFP-586 and the M553 printers. News of the threat emerged from a Foxglove Security deep-dive into printer security that saw the researchers warn HP of problems in August. The …

[Naselus]

I'm not too worried

Since my new HP Envy won't even let authorized users print to it remotely, I rather doubt anyone can execute anything malicious on it.

[Anonymous Coward]

The Wolf!

Some co-incidence here with HP running 'The Wolf' with Christian Slater on how secure their printers are.... oops!

[Anonymous South African Coward]

The only secure printer is one that connects via an oldstyle LPT (Centronics) cable... or nothing at all (glorious typewriter). :)

Wonder what vuls exists on other printers (Kyocera, Fujitsuu, Minolta etc).

I dislike it immensely giving a printer Internet access - what does it need from the 'net anyway?

And talking of which, how secure is this HP internet printing doohicky?

[Captain Scarlet]

The floppotron says different

Also the last time I went near our dot matrix it tried to eat my hand

[Christian Berger]

Well those, at least, can only do a moderate amount of damage. USB-printers are, in principle, much worse, as they can pose as keyboard and disk and therefore taking complete control over your PC.

[adam payne]

I assume there's no patch for my Laserjet 4.