Pesquisadores descobriram que pelo menos 150 modelos de impressoras multifuncionais da HP sofrem com várias brechas que podem levar ao vazamento de dados e execução remota de códigos maliciosos. As vulnerabilidades estão presentes em dispositivos lançados desde 2013, o que significa que, potencialmente, foram usadas para ataques virtuais durante os últimos oito anos.
- Grupo lança correção não oficial para vulnerabilidade de dia zero do Windows
- Operação global contra fraudes por e-mail prende mais de 1 mil pessoas
As falhas foram documentadas como CVE-2021-39237 e CVE-2021-39238. As vulnerabilidades mais críticas delas foram corrigidas na atualização de firmware para as impressoras afetadas lançadas pela HP no começo de novembro.
São duas falhas. A primeira, CVE-2021-39237, explora duas entradas físicas das impressoras e permitem o controle remoto total, inclusive com roubo de informações da máquina local. A segunda, CVE-2021-39238, é ainda mais grave, pois permite a execução de comandos maliciosos que podem se espalhar pela rede.
-
Podcast Porta 101: a equipe do Canaltech discute quinzenalmente assuntos relevantes, curiosos, e muitas vezes polêmicos, relacionados ao mundo da tecnologia, internet e inovação. Não deixe de acompanhar.
-
Além da atualização de firmware das impressoras, a HP recomenda que as seguintes ações sejam tomadas para diminuir ainda mais o risco:
- Desabilitar impressão via USB;
- Deixar a impressora conectada em uma rede separada para evitar propagação de ameaças, e limitar quem pode acessá-la;
- Configurar um servidor exclusivo para comunicação entre computadores e as impressoras.
As atualizações de firmware para as impressoras podem ser baixadas no site oficial da HP.
Dispositivos afetados
Confira a lista abaixo das impressoras afetadas:
- HP Color LaserJet Enterprise CM4540 MFP series
- HP Color LaserJet Enterprise Flow MFP M578
- HP Color LaserJet Enterprise MFP M578
- HP Color LaserJet Enterprise Flow MFP M880z
- HP Color LaserJet Managed Flow MFP M880zm
- HP Color LaserJet Enterprise M455
- HP Color LaserJet Enterprise M552
- HP Color LaserJet Enterprise M553
- HP Color LaserJet Managed M553
- HP Color LaserJet Enterprise M555 Printer series
- HP Color LaserJet Enterprise M651
- HP Color LaserJet Managed M651
- HP Color LaserJet Enterprise M652
- HP Color LaserJet Enterprise M653
- HP Color LaserJet Enterprise M750
- HP Color LaserJet Enterprise M751 series
- HP Color LaserJet Managed E75245
- HP Color LaserJet Enterprise M855 Printer series
- HP Color LaserJet Enterprise MFP M480 series
- HP Color LaserJet Enterprise MFP M577
- HP Color LaserJet Enterprise Flow MFP M577
- HP Color LaserJet Enterprise MFP M680
- HP Color LaserJet Enterprise Flow MFP M680
- HP Color LaserJet Enterprise MFP M681
- HP Color LaserJet Enterprise Flow MFP M681
- HP Color LaserJet Enterprise MFP M682
- HP Color LaserJet Enterprise Flow MFP M682
- HP Color LaserJet Enterprise MFP M776HP Color LaserJet Enterprise Flow MFP M776
- HP Color LaserJet Enterprises CP5525
- HP Color LaserJet Managed E45028
- HP Color LaserJet Managed E55040dw
- HP Color LaserJet Managed E65050/60
- HP Color LaserJet Managed E85055
- HP Color LaserJet Managed MFP E47528 series
- HP Color LaserJet Managed MFP E57540
- HP Color LaserJet Managed Flow MFP E57540
- HP Color LaserJet Managed MFP E67550/60
- HP Color LaserJet Managed Flow MFP E67550/60
- HP Color LaserJet Managed MFP E67650/60
- HP Color LaserJet Managed MFP E77422-E77428 series
- HP Color LaserJet Managed MFP E77822/25/30
- HP Color LaserJet Managed Flow MFP E77822/25/30
- HP Color LaserJet Managed MFP E78323/30
- HP Color LaserJet Managed MFP E87640/50/60
- HP Color LaserJet Managed Flow MFP E87640/50/60
- HP Color LaserJet Managed MFP E87640du-E87660du series
- HP Color LaserJet Managed MFP M577
- HP Color LaserJet Managed Flow MFP M577
- HP Color LaserJet Managed MFP M680
- HP Color LaserJet Managed Flow MFP M680
- HP Digital Sender Flow 8500 fn2
- HP LaserJet Enterprise 500 color MFP M575
- HP LaserJet Enterprise color Flow MFP M575
- HP LaserJet Enterprise 500 color Printer M551 series
- HP LaserJet Enterprise 500 MFP M525f
- HP LaserJet Enterprise Flow MFP M525
- HP LaserJet Enterprise 600 Printer M601 series
- HP LaserJet Enterprise 600 Printer M602 series
- HP LaserJet Enterprise 600 Printer M603 series
- HP LaserJet Enterprise 700 color MFP M775
- HP Color LaserJet Managed MFP M775
- HP LaserJet Enterprise 700 Printer M712 series
- HP LaserJet Enterprise Flow MFP M830
- HP LaserJet Managed Flow MFP M830
- HP LaserJet Enterprise M406
- HP LaserJet Enterprise M407
- HP LaserJet Enterprise M4555 MFP
- HP LaserJet Enterprise M506
- HP LaserJet Managed M506
- HP LaserJet Enterprise M507
- HP LaserJet Enterprise M604 series
- HP LaserJet Enterprise M605
- HP LaserJet Managed M605 series
- HP LaserJet Enterprise M606 series
- HP LaserJet Enterprise M607 series
- HP LaserJet Enterprise M608 series
- HP LaserJet Enterprise M609 series
- HP LaserJet Enterprise M610 series
- HP LaserJet Enterprise M611 series
- HP LaserJet Enterprise M612 series
- HP LaserJet Enterprise M806
- HP LaserJet Enterprise MFP M430 series
- HP LaserJet Enterprise MFP M431 series
- HP LaserJet Enterprise MFP M527
- HP LaserJet Enterprise Flow MFP M527z
- HP LaserJet Enterprise MFP M528
- HP LaserJet Enterprise MFP M630
- HP LaserJet Enterprise Flow MFP M630
- HP LaserJet Enterprise MFP M631
- HP LaserJet Enterprise Flow MFP M631
- HP LaserJet Enterprise MFP M632
- HP LaserJet Enterprise Flow MFP M632
- HP LaserJet Enterprise MFP M633
- HP LaserJet Enterprise Flow MFP M633
- HP LaserJet Enterprise MFP M634
- HP LaserJet Enterprise Flow MFP M634
- HP LaserJet Enterprise MFP M635
- HP LaserJet Enterprise Flow MFP M635
- HP LaserJet Enterprise MFP M636
- HP LaserJet Enterprise Flow MFP M636
- HP LaserJet Enterprise MFP M725
- HP LaserJet Managed MFP M725
- HP LaserJet Managed 500 color MFP M575
- HP LaserJet Managed color Flow MFP M575
- HP LaserJet Managed 500 MFP M525
- HP LaserJet Managed Flow MFP M525
- HP LaserJet Managed E40040
- HP LaserJet Managed E50045
- HP LaserJet Managed E50145
- HP LaserJet Managed E60055/65/75 series
- HP LaserJet Managed MFP E42540 series
- HP LaserJet Managed MFP E52545
- HP LaserJet Managed Flow MFP E52545c
- HP LaserJet Managed MFP E52645
- HP LaserJet Managed MFP E62555/65
- HP LaserJet Managed Flow MFP E62555/65/75
- HP LaserJet Managed MFP E62655/65
- HP LaserJet Managed Flow MFP E6267
- HP LaserJet Managed MFP E72425/30
- HP LaserJet Managed MFP E72525/30/35
- HP LaserJet Managed Flow MFP E72525/30/35
- HP LaserJet Managed MFP E82540/50/60
- HP LaserJet Managed Flow MFP E82540/50/60
- HP LaserJet Managed MFP E82540/50/60du series
- HP LaserJet Managed MFP M527
- HP LaserJet Managed Flow MFP M527z
- HP LaserJet Managed MFP M630
- HP LaserJet Managed Flow MFP M630
- HP OfficeJet Enterprise Color MFP X585
- HP OfficeJet Managed Color MFP X585
- HP OfficeJet Enterprise Color X555
- HP PageWide Color 755
- HP PageWide Color MFP 774
- HP PageWide Color MFP 779
- HP PageWide Enterprise Color 556
- HP PageWide Enterprise Color 765
- HP PageWide Enterprise Color Flow MFP 785
- HP PageWide Enterprise Color MFP 586
- HP PageWide Enterprise Color Flow MFP 586z
- HP PageWide Enterprise Color MFP 780
- HP PageWide Enterprise Color Flow MFP 780f
- HP PageWide Managed Color E55650
- HP PageWide Managed Color E75160
- HP PageWide Managed Color MFP E58650dn
- HP PageWide Managed Color Flow MFP E58650z
- HP PageWide Managed Color MFP E77650
- HP PageWide Managed Color Flow MFP E77660z
- HP PageWide Managed Color Flow MFP E77650/60z
- HP PageWide Managed Color MFP P77440
- HP PageWide Managed Color MFP P77940/50/60
- HP PageWide Managed Color P75250
- HP ScanJet Enterprise 8500 FN1 Document Capture Workstation series
- HP ScanJet Enterprise Flow N9120 fn2 Document Scanner
Leia a matéria no Canaltech.
Trending no Canaltech:
- Variante Ômicron chega ao Brasil; Anvisa confirma 2 casos
- Conheça o carro elétrico de 3 rodas que será o mais barato do Brasil
- Foto mostra Saturno e seus anéis vistos por sonda da NASA que orbita a Lua
- Tesla Model 3 pega fogo durante carregamento e liga sinal de alerta nos EUA
- Vazam especificações de novo celular da Motorola com Snapdragon 888 Plus
Canal Tech