Xerox Plugs Critical Hole on its WorkCentre Printers

Xerox has released a patch to fix a recently discovered vulnerability on its WorkCentre multi-function printers. The loop hole could potentially allow hackers to gain control of the printer. The patch can be downloaded here.

Earlier this month, Xerox discovered a susceptibility that provided easy access to hackers onto their WorkCentre printers. This could have potentially landed confidential data into wrong hands as the printer contains memory which stores certain number of pages that were printed previously.

Xerox states that the problem is a caused by a buffer overflow in Samba (the open source file server) which is part of the embedded software in these devices. Arbitrary code may be injected and executed using specially-crafted packets.

Generally all printers from major manufacturers go through a series of security checks and be certified, to ascertain (and to use it as a commercial gimmick) that the printer is fit for offices where confidential data is being printed from time to time. Xerox has ensured that their printers go through certain security profile tests but such discoveries on glaring loop holes suggest that the security certifications is more of a publicity stunt rather than the purpose it serves.