Do printers really need to have their software updated?

This question was answered on March 31, 2022. Much of the information contained herein may have changed since posting.

The first line of defense against much of the malicious activity being perpetrated online is by making sure your devices and software are protected by installing the latest updates - that includes many of today’s printers.

While updates aren’t always for security purposes (they can also improve functionality or even add new features) often, they are fixing recently discovered vulnerabilities.

When you don’t install these updates, you become a valuable target for those looking to exploit unprotected users through malicious websites or phishing scams.

When you visit any website, there is an exchange of information that goes on in the background which can include a silent probe of your device to see if it is vulnerable.

Malicious files that can appear to be official documents in an email are another approach used by hackers to silently probe your devices for unpatched vulnerabilities.

Firmware Updates
Hardware devices often use small embedded software programs installed during the manufacturing process - called firmware - that provide a set of instructions for how the device is to operate.

Because this code is embedded in one of the hardware components, it’s not the same as traditional software or an operating system but the process of updating it generally works the same way.

You would go to the support section of the manufacturer’s website to find your specific model and look for updates for that device. Once downloaded, getting the update to your hardware device usually requires it to be connected to your computer.

The specific instructions for installing the firmware update for each device is usually provided along with the update on the website.

A variety of common hardware devices such as printers, scanners, cameras, routers, smart home devices, streaming media players and smart TVs offer firmware updates. If it connects to the Internet in any way, it’s very important to keep up with any of the security updates that are published.

In some cases, the updates can be automatically downloaded and installed, or you can go to the Settings menu of the device to see if an update is available (e.g. Apple TV).

Many smart home devices have an associated app that can be used to check for and install updates over Wi-Fi.

Critical HP Printer Advisory
Hewlett Packard recently published a critical security advisory for a large number of their printing and digital sending products because of a potential remote code execution vulnerability: https://bit.ly/3LuMK1E

This type of vulnerability is considered very serious because it could allow a remote attacker to gain full access to the device.

This can be especially dangerous for large business networks as the printer can become the gateway to much larger attacks across the network.

The affected devices include many of HP’s popular LaserJet, OfficeJet and DeskJet models, so anyone with an HP printer should check to see if their device is included in the advisory.

If so, you can locate the firmware update for your specific device via the HP Customer Support downloads page: https://bit.ly/3DvijW1

If your HP printer connects directly to the Internet, you should be able to check for the firmware update via the printer’s control panel by going to the ‘Settings’ menu.