Kaspersky finds Bluetooth flaw in widely used warehouse barcode scanners
Kaspersky researchers found that handheld barcode scanners and their base stations communicate over Bluetooth without authentication. An attacker could eavesdrop to get the base station's address and send spoofed keystrokes, gaining a foothold in enterprise networks.
- Scanner and base station pair over Bluetooth with no mutual authentication
- Attack lets intruders inject keystrokes into connected workstations
- Flaw observed across devices from multiple vendors
- Kaspersky urges network segmentation and disabling unused Bluetooth
Read next
Security