HP LaserJet printers have a critical security bug - and there's nothing you can do for now

Printer locked
(Image credit: Shutterstock.com)

HP has issued a warning to business customers using certain LaserJet printer models that they should remain vigilant and take steps to tackle a vulnerability that could see unwanted information disclosure occur.

CVE-2023-1707 was awarded a score of 9.1 making it of critical severity. Its description reads: “Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled with FutureSmart version 5.6.”

The hardware and infrastructure giant has announced plans to issue a firmware update within 90 days, advising customers to downgrade firmware in the meantime to prevent unwanted attacks.

HP LaserJet printer vulnerability

The company confirmed that affected customers are running FutureSmart 5.6, software designed to enable printer configuration from the control panel or a dedicated web page. Affected users will also have IPsec enabled.

A full list of the affected HP Enterprise LaserJet and HP LaserJet Managed Printers models can be found on the security notice, which suggests a temporary downgrade to version of the firmware for a period of up to three months while HP works on a fix.

With laser printing coming under scrutiny for its environmental impacts, such as high energy usage, dissatisfied customers unwilling to wait 90 days may be tempted to consider new hardware.

The company recently announced new Color LaserJet printers that promise to reduce energy consumption by up to 27%. ITDMs less loyal to HP specifically may also want to consider moving to rival brands like Epson, which earlier this year announced new inkjet printers that use a quarter of a typical laser printer’s energy while matching printing speeds.

Regardless, manufacturer security advice should always be adhered to, and a firmware downgrade is a must for any business that values security ahead of a patch.

Craig Hale

With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!