HP refutes printer security flaw claims

搜索关注在线英语听力室公众号：tingroom，领取免费英语资料大礼包。

　　"Today there has been sensational¹ and inaccurate² reporting regarding a potential security vulnerability with some HP LaserJet printers. No customer has reported unauthorized access. Speculation³ regarding potential for devices to catch fire due to a firmware change is false," HP said in the statement.

　　Tech blog "The Red Tape Chronicle" reported earlier Tuesday that researchers from Columbia University found that a feature named "remote firmware update" on HP's Internet-connected LaserJet printers could allow hackers⁵ take control of the device by installing malicious⁶ software, and even manage the printer to catch fire.

　　In the statement, HP said that its LaserJet printers have a hardware element called "thermal⁷ breaker" that is designed to prevent a part of the device from overheating or causing a fire, noting that it cannot be overcome by a firmware change as it was reported.

　　The Palo Alto, California-based company said that the specific vulnerability exists for some HP LaserJet printers it placed on a public Internet without a firewall. It conceded that on Apple's Mac computers and PCs running Linux system, it is possible for a specially⁸ formatted⁹ corrupt¹⁰ print job to trigger a firmware upgrade.

　　The company said that it is building a firmware upgrade to mitigate¹¹ the issue and suggested consumers could place printers behind a firewall and disable remote firmware upload on exposed printers.

　　Researchers said in the earlier report that they believed the flaw is not limited to HP printers and millions of printers around the world could be vulnerable to hack⁴ attacks.

分享到：