Details from the Computer Emergency Response Team list how Samsung printers released before 31 October may feature the flaw that allows outside access.
A vulnerability note issued from the US Computer Emergency Response Team (CERT) has detailed how Samsung printers released prior to 31 October 2012 have been found to contain a hard-coded account that may enable outside access to the device, and even remotely take control, reports ZDNet.
CERT lists how printers featuring a Simple Network Management Protocol (SNMP) account programmed into the firmware will permit access to the device even if disable by the printer’s management utility. A number of Dell printers are also stated as being at risk.
ZDNet states that “the vulnerability note also states that when compromised this way, an attacker could use the printer to execute further attacks. Such an example could include finding another vulnerability in the device to allow the attacker to execute arbitrary code”.
SNMP is intended to allow administrators to manage and monitor networked devices, including printers, routers and servers. As such, any attackers will easily be able to change the printer settings, and capture any networked traffic the printer has assess to.
Printer security is seeing increasing focus as network capabilities of devices improves and security measures have need to match the shift in printer technology. Xerox recently announced its first anti-malware MFP in partnership with McAfee, as HP announces a 40 percent increase in cybercrime in the US.
Samsung is said to be working on a patch, to be released within the year.