Hp COLOR LASERJET 2800 Fax Security Issues

HP Color LaserJet

Drawer

2840 AIO Printer –
Fax Security Issues

Statement

Security Level: Public
Date Written/Updated: September 13, 2006

HP LaserJet AIO products have the ability to send and receive fax data via phone lines that
conform to public switch telephone network (PSTN) standards. The device is ITU Group 3 and
error correction mode (ECM), fax compatible. Fax pages are transmitted and received according
to a number of international fax standards, including handshaking protocols, data compression,
and encoding methods.

HP LaserJet AIO products can only be used for exchange of data using fax protocols. The
modem in the device is connected to the internal fax subsystem. All communication through the
modem must go through the fax subsystem firmware, which does not implement data exchange
protocols. Therefore, HP LaserJet AIO products cannot be used for exchanging non-fax data.

When a file is received via the modem into the HP LaserJet AIO product, it is stored in an internal file
system. At some point, that file may be uploaded to a connected host. There is no direct connection
between the modem and any device(s) connected to the parallel or USB ports of the HP LaserJet
AIO product.

Similarly, the interface between a PC and the HP LaserJet AIO products is for downloading files to
be faxed or uploading files that have been received. Once a file has been downloaded to the HP
LaserJet AIO product, the file is sent out the modem under the control of the fax subsystem firmware.
Again, there is no direct communication path between the host and the modem.

It should also be noted that it is not possible to modify the HP LaserJet AIO products internal
firmware through the modem (i.e. over the phone).

Computer and network security features

The HP Color LaserJet 2840 all-in-one can send and receive fax data over telephone lines that
conform to public switch telephone network (PSTN) standards. The secure fax protocols make it
impossible for computer viruses to be transferred from the telephone line to a computer or
network. The following all-in-one features prevent virus transmission:

• No direct connection exists between the fax line and any devices that are connected to
the USB or Ethernet ports.

• The internal firmware cannot be modified through the fax connection.

• All fax communications go through the fax subsystem, which does not use Internet data-

exchange protocols.

Document Attributes

Product Models: HP CLJ 2840 AIO
Product Numbers: Q3950A

Page 1 of 1