Nullcon Berlin 2024 | Printer Hacking Adventures By Peter Geissler

This talk explores the intricacies of networked printers and their role as entry points into corporate networks. The speaker discusses how these printers operate on Linux or proprietary real-time operating systems, and details methods for accessing and debugging their firmware. The session presents three different exploit chains for Canon ImageCLASS and Lexmark printers, demonstrating how specific vulnerabilities, including memory corruption and logic bugs, can lead to full system compromise. These exploits were highlighted during the annual Pwn2Own competition, providing valuable insights into security flaws within printer technology.