Security News

2458 readers

1 users here now

founded 2 years ago

MODERATORS

jerry@infosec.pub

Critical Bugs in Canon Printers Allow Code Execution, DDoS (www.darkreading.com)

submitted 9 months ago by IllNess@infosec.pub to c/securitynews@infosec.pub

5 comments fedilink hide all child comments

No exploitations have been observed in the wild as of yet, according to the company's European site, but owners should scan for indicators of compromise given that the bugs have been publicly known but unpatched for months.

Beyond the obvious step of updating to the latest firmware, Canon is advising its customers to "set a private IP address for the products and create a network environment with a firewall or wired/Wi-Fi router that can restrict network access."

all 6 comments

sorted by: hot top controversial new old

[–] agent_flounder@lemmy.world 4 points 9 months ago (3 children)

set a private IP address for the products and create a network environment with a firewall or wired/Wi-Fi router that can restrict network access.

Ah yes, so simple a child could do it.

Good thing citizens are all well versed in networking and cyber security.

If only there were vast profits in writing secure code maybe we wouldn't see the same thing over and over again.

[–] IllNess@infosec.pub 1 points 9 months ago (1 children)

How much would it cost to merge and test operating systems?

I'm pretty sure it can't be more than the potential damages these devices can do...

[–] agent_flounder@lemmy.world 2 points 9 months ago

Canon doesn't have to pay for hacked devices, though. And it costs money to develop and maintain a secure coding program. Companies want to cut costs not improve quality. And so here we are.

[–] ItsAFake@lemmus.org 1 points 9 months ago

Just so our job for us so we don't have to code a fix.