OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Edwards, David (JTS) (Edwards.Davesaugov.sa.gov.au)
Date: Thu May 02 2002 - 20:31:30 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi,

    I've been asked to look at the security of multifunction devices such as the
    new RICOH and HP models that combine printer/fax/scanner/copier etc.. They
    seem to be moving from the SOHO environment onto the corporate networks and
    there obviously a risk to assess.

    So far I've been unable to find any incidents regarding these devices. They
    seem to include a complete tcp/ip stack, many have internal hard disks, and
    they often offer many network services such as ftp, telnet, snmp, http and
    even e-mail, which probably only pay lip service to security given their
    focus on functionality.

    Has anyone got any war stories about these types of machines or information
    about the source of the embedded systems?

    ciao
    dave 

    ---
Dave Edwards 
Justice Technology Services
Ph: +61 8 82265426 || 0408 808355 
mailto: edwards.davesaugov.sa.gov.au
Snail : Justice Technology Division 
        GPO Box 2048, Adelaide 5001
---

    ----------------------------------------------------------------------------
This list is proġ˙ded by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/