HP warns printer users of hacking risk

Print and maybe be damned

Hewlett-Packard has identified a vulnerability in software used by owners of some of its printers.

The security vulnerability affects the Toolbox software installed alongside the Color LaserJet 2500 and 4600 printers.

The Toolbox software installs on a PC along with the printer drivers.

It uses a simple web browser interface for access to printer status information, troubleshooting tips and demos, and an alerts feature.

The flaw allows hackers to steal information from users. Experts at SophosLabs urged all users of the affected printer software to upgrade to the latest version.

"A vulnerability like this opens the door for hackers to spy upon your sensitive information," said Graham Cluley, senior technology consultant at security firm Sophos.

"Not protecting yourself against this problem is like leaving your front door open when you pop down the shops, and expecting to find that no-one has stolen your belongings.

"Users who are running the affected software should upgrade as soon as possible, and everyone should make sure they are fully informed of the latest security notifications."

Sophos has published a link to more information and fixes from HP.