A security flaw in these widely used barcode readers could expose warehouses and stores to cyber attacks
follow us
Add us as a preferred source on Google
- Researchers find Bluetooth flaws in warehouse barcode readers that could provide a foothold in enterprise networks
- Attackers could spoof scanner input, inject keystrokes, and potentially resort to ransomware or data theft.
- Kaspersky calls for stronger device authentication, network segmentation and tighter security controls for warehouse infrastructure
Cybercriminals could use barcode scanners in warehouses to break into IT infrastructure and wreak havoc, security researchers have said, urging organizations to take preventative measures and secure their warehouse grounds before it is too late.
Kaspersky researchers set out to see if there were hidden attack vectors in the warehouse infrastructure and now claim to have found one through a barcode scanner model “from a major manufacturer.”
Opening the floodgates
In a report shared with TechRadar Pro, Kaspersky said the vulnerable device has two components: the handheld scanner and the base station, which then connects to a workstation or a standalone enterprise system.
Latest videos ofTechnologyRadar
The two components communicate via Bluetooth, but there appear to be no authentication methods between the two.
So, in theory, a malicious actor could obtain the base station’s Bluetooth address by passively eavesdropping on Bluetooth traffic. Then, through the established Bluetooth connection, they could send a malicious payload to the base station that simulates keystrokes. The base station would “think” the keystrokes are legitimate, coming from the user of the handheld device, and forward them to the connected workstation or standalone enterprise system.
“This attack pattern was observed on devices from multiple vendors,” Kaspersky said in its report.
Using this method, a theoretical attacker could gain an initial foothold on a computer within the warehouse network. Obviously, the scanner is just the entry point and not the actual goal. The target is the broader network, where malicious actors could conduct reconnaissance, leak sensitive information, or deploy malware and ransomware.
“Modern retail and logistics are deeply digital, from enterprise-wide management platforms to every device in a worker’s hands. This pervasive connectivity means that any technology at any level can become an entry point for a cyberattack capable of destabilizing the entire ecosystem – as our research shows, even a single barcode scanner,” said Sergey Sidorov, Head of Industrial Security Services at Kaspersky.
“The warehouse sector, and the retail industry in general, should treat cybersecurity as a top priority at every layer of their operations.”
Are other devices vulnerable too?
Kaspersky says the same scenario can be applied to other warehouse devices, such as portable data terminals (PDRs) or thermal printers, to gain access to warehouse management systems (WMS) and similar infrastructures.
Therefore, researchers urge companies to protect their environments by verifying each new device before it connects to the network, disabling any unused Bluetooth interfaces, enforcing strong authentication mechanisms, segmenting warehouse networks so that only essential connections are allowed, applying security updates to both devices and the WMS as soon as possible, restricting account permissions to the minimum required, and periodically conducting large-scale attack path exercises.
Unfortunately, we do not know the name of the manufacturer or how many devices in a series might be susceptible. Researchers say the risk is quite large, as these devices are “widely used” in storage, retail and many other sectors.
Global e-commerce sales are expected to reach $6.88 trillion this year, accounting for more than a fifth (21.1%) of total retail sales worldwide.
At the same time, according to logistics research firm Interact Analysis, there are more than 180,000 warehouses in the world, so the attack surface could be significant. But warehouses are not the only sector at risk. Barcode readers and related handheld terminals are also widely used in retail stores, manufacturing facilities, hospitals, pharmaceutical operations, and transportation networks.
There is no reliable way to estimate how many organizations are vulnerable, but the ability to use an everyday operating device to gain access to a connected workstation makes the findings relevant to a wide range of industries.
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to receive news, reviews and opinions from our experts in your feeds.
Post Comment