Security News Epson Reportedly Issued Firmware Updates to Disable Third-Party Ink Support

LASER_oneXM

Level 37
Thread author
Verified
Top Poster
Well-known
Feb 4, 2016
2,520
If true, could convince users not to update printer software

The Electronic Frontier Foundation (EFF) sent a letter to the Texas Attorney General's office regarding possible firmware updates released by Epson for their printers which disabled support for third-party inks.

Moreover, the EFF found out about Epson's problematic firmware upgrade from a Texas supporter and sent a letter to the Texas Attorney General's office asking the consumer protection division to take a closer look into the reported third-party ink disabling incident.

Although Epson's firmware updates reportedly did nothing else besides restricting a printer's functionality, this can lead to serious cybersecurity issues if true because it has the potential of convincing customers that firmware upgrades are something to be avoided.

Having unpatched printer firmware on a corporate network is even more dangerous given that on multiple occasions security researchers have found out that such devices can be used as both entry and pivot points during corporate network attacks.

Printers left unpatched are vulnerable to multiple types of attacks, with denial of service, privilege escalation, print job access, information disclosure, and code execution being the most important.
 
L

Local Host

This has been a thing for over a decade, wonder why everyone is so surprised.
HP used to do this (don't know if they still do), and there are ways around it by refilling the cartridges with ink (which is cheaper overall).
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top