Vulnerabilities in Office Printers, Multifunction Printers (MFP), 3D Printers, and Digital Copiers: A Gateway to Breach Our Enterprise Network

Abstract

Despite the advancements in security, threats have become more sophisticated than ever-leading companies to think outside the box. Cyberattacks are becoming increasingly sophisticated due to hybrid work. Business continuity often took precedence over security concerns as organizations scrambled to comply with shifting regulations. Now that more people are working remotely via cloud services, IT needs assistance from cybersecurity experts. There are several sources that can pose a threat, including office printers. It is not uncommon for printers to have hundreds of potential entry points for hackers, who can then bring a system to its knees by taking control of one of the printers attached to it. In today’s world, printers are very much computers and are often connected to the Internet. Having advanced abilities makes it easy for cybercriminals to access them. This paper analyzes printer attacks from the past and provides a general methodology for analyzing printer security. Our methodology will be used to conduct online surveys of experienced IT practitioners to explore their exposure to social engineering attacks and security concerns related to printers, digital copiers, and 3D printers. Passive reconnaissance will be conducted to determine the extent to which some network protocols are exposed by these devices. A compiled checklist has been consolidated to be considered by businesses as a risk mitigation technique to secure the devices from vulnerabilities and attacks.