BlackHat Con: Snooping Printer Data

At this years Black Hat conference in New York, security consultant Brendan O’Connor displayed a proof of concept attack against a Xerox printer. Exploiting vulnerabilities in the printers embedded software; O’Connor was able to snoop on the traffic being passed to the device. During the conference O’Connor highlighted the importance of security in embedded software and pointed out the huge amount of sensitive information that could be leaked if such an attack occurred. Xerox has released a patch for their WorkCenter printers but O’Connor maintains that the issue is not fully resolved.