Más de 150 impresoras de HP son vulnerables a dos fallos que podrían dar a los hackers acceso completo a los dispositivos, según la empresa de seguridad F-Secure.
“En nuestra búsqueda para mejorar nuestras capacidades de simulación de ataques mientras aprendemos la seguridad del hardware, descubrimos dos métodos muy diferentes para obtener el control total de las MFP de HP [impresoras multifunción]: conectores expuestos para el acceso al shell y un problema de corrupción de memoria en el analizador de fuentes”, “dice” F-Secure en un desglose técnico de sus hallazgos. “El primero requiere acceso físico al dispositivo, pero el segundo puede ser explotado de forma remota, incluso directamente desde un sitio web malicioso”.
La investigación inicial se llevó a cabo en un HP MFP M725z que ejecutaba un firmware que fue lanzado en 2013. F-Secure dice que más tarde descubrió que versiones más recientes del firmware también estaban afectadas por las vulnerabilidades. HP publicó el 1 de noviembre parches para ambos fallos en “ciertas impresoras HP LaserJet, HP LaserJet Managed, HP PageWide y HP PageWide Managed” y reveló las vulnerabilidades como CVE-2021-39237 y CVE-2021-39238.
Esto significa que unos 150 modelos de impresoras y firmware de HP que datan de al menos ocho años atrás eran vulnerables antes de que F-Secure descubriera los fallos. Afortunadamente, el impacto de ambas vulnerabilidades debería ser mitigado por el esfuerzo requerido para explotarlas.
“La buena noticia es que los atacantes también tienen presupuesto”, dice F-Secure, “y un fallo en el parser de fuentes en un MFP es poco probable que sea la fruta de bajo precio que los atacantes escogerían para atacar a una organización típica.”
Las organizaciones que utilizan impresoras HP afectadas deben instalar las últimas actualizaciones de firmware para defender sus máquinas. HP también dice que “los clientes preocupados por posibles ataques físicos”, similares al que F-Secure demostró explotando CVE-2021-39237, “deberían seguir la recomendación de la guía del usuario del producto de utilizar un candado de estilo Kensington para protegerse contra este y otros tipos potenciales de ataques físicos a las impresoras HP.”
La lista completa de impresoras afectadas se encuentra a continuación:
| HP Color LaserJet Enterprise CM4540 MFP series | CC419A, CC420A, CC421A | FS3: 3.9.8 or higher |
| HP Color LaserJet Enterprise Flow MFP M578HP Color LaserJet Enterprise MFP M578 | 7ZU85A, 7ZU86A, 7ZU87A, 7ZU88A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise Flow MFP M880zHP Color LaserJet Managed Flow MFP M880zm | D7P70A, A2W75A, A2W76A, D7P70A, D7P71A, L3U51A, L3U52A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP Color LaserJet Enterprise M455 | 3PZ95A | FS: 5.3 or higher |
| HP Color LaserJet Enterprise M552 | B5L23A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise M553HP Color LaserJet Managed M553 | B5L24A, B5L25A, B5L26A, BL27A, B5L38A, B5L39A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise M555 Printer series | 7ZU78A, 7ZU79A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise M651HP Color LaserJet Managed M651 | CZ255A, CZ256A, CZ257A, H0DC9A, L8Z07A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP Color LaserJet Enterprise M652 | J7Z98A, J7Z99A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise M653 | J8A04A, J8A05A, J8A06A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise M750 | D3L08A, D3L09A, D3L10A | FS3: 3.9.8 or higher |
| HP Color LaserJet Enterprise M751 seriesHP Color LaserJet Managed E75245 | T3U43A, T3U44A, T3U64A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise M855 Printer series | A2W77A, A2W78A, A2W79A, D7P72A, D7P73A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP Color LaserJet Enterprise M856 | T3U51A, T3U52A, | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise MFP M480 series | 3QA55A | FS: 5.3 or higher |
| HP Color LaserJet Enterprise MFP M577HP Color LaserJet Enterprise Flow MFP M577 | B5L46A, B5L47A, B5L48A, B5L54A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise MFP M680HP Color LaserJet Enterprise Flow MFP M680 | CZ248A, CZ249A, CZ250A, CA251A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP Color LaserJet Enterprise MFP M681HP Color LaserJet Enterprise Flow MFP M681 | J8A10A, J8A11A J8A12A, J8A13A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise MFP M682HP Color LaserJet Enterprise Flow MFP M682 | J8A16A, J8A17A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprise MFP M776HP Color LaserJet Enterprise Flow MFP M776 | T3U55A, T3U56A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Enterprises CP5525 | CE707A,CE708A,CE709A | FS3: 3.9.8 or higher |
| HP Color LaserJet Managed E45028 | 3QA35A | FS: 5.3 or higher |
| HP Color LaserJet Managed E55040dw | 3GX98A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed E65050/60 | L3U55A, L3U56A, L3U57A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed E85055 | T3U66A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP E47528 series | 3QA75A | FS: 5.3 or higher |
| HP Color LaserJet Managed MFP E57540HP Color LaserJet Managed Flow MFP E57540 | 3GY25A, 3GY26A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP E67550/60HP Color LaserJet Managed Flow MFP E67550/60 | L3U66A, L3U67A, L3U69A, L3U70A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP E67650/60 | 3GY31A, 3GY32A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP E77422-E77428 series | 5CM75A, 5CM76A, 5CM77A, 5CM78A, 5CM79A, 5RC91A, 5RC92A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP E77822/25/30HP Color LaserJet Managed Flow MFP E77822/25/30 | X3A77A, X3A80A, X3A83A, Z8Z01A, Z8Z0A, Z8Z05A, X3A78A, X3A81A, X3A84A, Z8Z00A, Z8Z02A, Z8Z04A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP E78223-E78228 series | 8GS12A, 8GS13A, 8GS14A, 8GS15A, 8GS36A, 8GS37A, 8GS43A, 8GS44A, 8GS50A, 17F27AW, 19GSAW, | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP E78323/30 | 8GS00A, 8GS01A, 8GS25A, 8GS26A, 8GS27A, 8GS28A, 8GS29A, 8GS30A, 8GR94A, 8GR95A,8GR96A, 8GR97A, 8GR98A, 8GR99A, 8PE94A, 8PE95A, 8PE96A, 8PE97A, 8PE98A, 9RT91A, 9RT92A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP E87640/50/60HP Color LaserJet Managed Flow MFP E87640/50/60 | X3A86A, X3A87A,X3A89A, X3A90A, X3A92A, X3A93A, Z8Z12A, Z8Z13A, Z8Z14A, Z8Z15A, Z8Z16A, Z8Z17A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP E87640du-E87660du series | 5CM63A, 5CM64A, 5CM65A, 5CM66A, 5FM80A, 5FM81A, 5FM82A, 5RC86A, 5RC87A, 5RC88A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP M577HP Color LaserJet Managed Flow MFP M577 | B5L49A, B5L50A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP Color LaserJet Managed MFP M680HP Color LaserJet Managed Flow MFP M680 | L3U47A, L3U48A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP Digital Sender Flow 8500 fn2Document Capture Workstation | L2762A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise 500 color MFP M575HP LaserJet Enterprise color Flow MFP M575 | CD644A, CD645A, CD646A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP LaserJet Enterprise 500 color Printer M551 series | CF081A,CF082A,CF083A | FS3: 3.9.8 or higher |
| HP LaserJet Enterprise 500 MFP M525fHP LaserJet Enterprise Flow MFP M525 | CF116A, CF117A, CF118A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP LaserJet Enterprise 600 Printer M601 series | CE989A, CE990A | FS3: 3.9.8 or higher |
| HP LaserJet Enterprise 600 Printer M602 series | CE991A, CE992A, CE993A | FS3: 3.9.8 or higher |
| HP LaserJet Enterprise 600 Printer M603 series | CE994A, CE995A, CE996A | FS3: 3.9.8 or higher |
| HP LaserJet Enterprise 700 color MFP M775HP Color LaserJet Managed MFP M775 | CF304A, CC522A, CC523A, CC524A, L3U49A, L3U50A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP LaserJet Enterprise 700 Printer M712 series | CF235A, CF236A, CF238A | FS3: 3.9.8 or higher |
| HP LaserJet Enterprise Flow MFP M830HP LaserJet Managed Flow MFP M830 | CF367A, L3U65A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP LaserJet Enterprise M406 | 3PZ15A | FS: 5.3 or higher |
| HP LaserJet Enterprise M407 | 3PZ16A | FS: 5.3 or higher |
| HP LaserJet Enterprise M4555 MFP | CE502A, CE503A, CE504A, CE738A | FS3: 3.9.8 or higher |
| HP LaserJet Enterprise M506HP LaserJet Managed M506 | F2A68A, F2A69A, F2A70A, F2A71A, F2A66A, F2A67A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M507 | 1PV86A, 1PV87A, 1PV88A, 1PV89A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M604 series | E6B67A, E6B68A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M605HP LaserJet Managed M605 series | E6B69A, E6B70A. E6B71A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M606 series | E6B72A, E6B73A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M607 series | K0Q14A, K0Q15A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M608 series | K0Q17A, K0Q18A, K0Q19A, M0P32A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M609 series | K0Q20A, K0Q21A, K0Q22A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M610 series | 7PS81A, 7PS82A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M611 series | 7PS83A, 7PS84A, 7PS85A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M612 series | 7PS86A, 7PS87A, 7PS88A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise M806 | CZ244A, CZ245A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP LaserJet Enterprise MFP M430 series | 3PZ55A | FS: 5.3 or higher |
| HP LaserJet Enterprise MFP M431 series | 3PZ56A | FS: 5.3 or higher |
| HP LaserJet Enterprise MFP M527HP LaserJet Enterprise Flow MFP M527z | F2A76A, F2A77A, F2A78A,F2A81A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise MFP M528 | 1PV49A, 1PV64A, 1PV65A, 1PV66A, 1PV67A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise MFP M630HP LaserJet Enterprise Flow MFP M630 | B3G84A, B3G85A, J7X28A, B3G86A, P7Z47A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP LaserJet Enterprise MFP M631HP LaserJet Enterprise Flow MFP M631 | J8J63A, J8J64A, J8J65A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise MFP M632HP LaserJet Enterprise Flow MFP M632 | J8J70A, J8J71A, J8J72A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise MFP M633HP LaserJet Enterprise Flow MFP M633 | J8J76A, J8J78A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise MFP M634HP LaserJet Enterprise Flow MFP M634 | 7PS94A, 7PS95A, 7PS96A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise MFP M635HP LaserJet Enterprise Flow MFP M635 | 7PS97A, 7PS98A, 7PS99A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise MFP M636HP LaserJet Enterprise Flow MFP M636 | 7PT00A, 7PT01A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Enterprise MFP M725HP LaserJet Managed MFP M725 | CF066A, CF067A, CF068A, CF069A, L3U63A, L3U64A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP LaserJet Managed 500 color MFP M575HP LaserJet Managed color Flow MFP M575 | L3U45a, L3U46A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP LaserJet Managed 500 MFP M525HP LaserJet Managed Flow MFP M525 | L3U59A, L3U60A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP LaserJet Managed E40040 | 3PZ35A | FS: 5.3 or higher |
| HP LaserJet Managed E50045 | 3GN19A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed E50145 | 1PU51A, 1PU52A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed E60055/65/75 series | M0P33A, M0P35A, M0P36A, M0P39A, M0P40A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed MFP E42540 series | 3PZ75A | FS: 5.3 or higher |
| HP LaserJet Managed MFP E52545HP LaserJet Managed Flow MFP E52545c | 3GY19A, 3GY20A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed MFP E52645 | 1PS54A, 1PS55A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed MFP E62555/65HP LaserJet Managed Flow MFP E62555/65/75 | J8J66A, J8J67A, J8J73A, J8J74A, J8J79A, J8J80A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed MFP E62655/65HP LaserJet Managed Flow MFP E62675 | 3GY14A, 3GY15A, 3GY16A, 3GY17A, 3GY18A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed MFP E72425/30 | 5CM68A, 5CM69A, 5CM70A, 5CM71A, 5CM72A, 5RC89A, 5RC90A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed MFP E72525/30/35HP LaserJet Managed Flow MFP E72525/30/35 | X3A59A, X3A60A,X3A62A, X3A63A, X3A65A, X3A66A, Z8Z06A, Z8Z07A, Z8Z08A, Z8Z09A, Z8Z010A, Z8Z011A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed MFP E82540/50/60HP LaserJet Managed Flow MFP E82540/50/60 | X3A68A, X3A69A, X3A71A, X3A72A, X3A74A, X3A75A, X3A79A, X3A82A, Z8Z18A, Z8Z19, AZ8Z20A, Z8Z22A, Z8Z23A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed MFP E82540/50/60du series | 5CM59A, 5RC83A, 5FM76A, 5CM58A, 5RC84A, 5FM77A, 5CM61A, 5RC85A, 5FM78A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed MFP M527HP LaserJet Managed Flow MFP M527z | F2A79A, F2A80A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP LaserJet Managed MFP M630HP LaserJet Managed Flow MFP M630 | L3U61A, L3U62A, P7Z48A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP OfficeJet Enterprise Color MFP X585HP OfficeJet Managed Color MFP X585 | B5L04A, B5L05A, L3U40A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP OfficeJet Enterprise Color X555 | C2S11A, C2S12A,L1H45A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higher |
| HP PageWide Color 755 | 4PZ47A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Color MFP 774 | 4PZ43A, 4PA44A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Color MFP 779 | 4PZ45A, 4PZ46A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Enterprise Color 556 | G1W46A, G1W46V, G1W47A, G1W47V | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Enterprise Color 765 | J7Z04A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Enterprise Color Flow MFP 785 | J7Z11A, J7Z12A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Enterprise Color MFP 586HP PageWide Enterprise Color Flow MFP 586z | G1W39A, G1W40A, G1W41A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Enterprise Color MFP 780HP PageWide Enterprise Color Flow MFP 780f | J7Z09A, J7Z10A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Managed Color E55650 | L3U44A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Managed Color E75160 | J7Z06A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Managed Color MFP E58650dnHP PageWide Managed Color Flow MFP E58650z | L3U42A,L3U43A | FS3: 3.9.8 or higherFS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Managed Color MFP E77650HP PageWide Managed Color Flow MFP E77660zHP PageWide Managed Color Flow MFP E77650/60z | J7Z13A, Z5G79A, J7Z08A, J7Z14A, J7Z05A, Z5G77A, J7Z03A, J7Z07A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Managed Color MFP P77440 | Y3Z60A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Managed Color MFP P77940/50/60 | Y3Z61A, Y3Z62A, Y3Z63A, Y3Z64A, Y3Z65A, Y3Z66A, Y3Z68A, 2GP22A, 2GP23A, 2GP25A, 2GP26A, 5ZN98A, 5ZN99A, 5ZP00A, 5ZP01A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP PageWide Managed Color P75250 | Y3Z49A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
| HP ScanJet Enterprise 8500 FN1 Document Capture Workstation series | L2717A, L2719A | FS3: 3.9.8 or higher |
| HP ScanJet Enterprise Flow N9120 fn2 Document Scanner | L2763A | FS4: 4.11.2.1 or higherFS5: 5.3 or higher |
Lo más visto del mes en Seguridad
Laura Andrade
Laura Andrade es una periodista freelance especializada en la investigación de la electrónica de consumo, especialmente de smartphones, tabletas y ordenadores. Actualmente participa en varios proyectos en los que se ha encargado de escribir sobre lanzamientos de nuevos productos digitales, aplicaciones, sitios y servicios para publicaciones impresas o en línea. Está constantemente estudiando las últimas tecnologías para estar siempre al día.
