Barcode scanners used in warehouses contain critical Bluetooth vulnerabilities that could allow attackers to infiltrate enterprise networks, as first reported by Tech Radar.
Researchers at Kaspersky discovered that certain barcode scanners lack authentication between the handheld device and its base station. By eavesdropping on Bluetooth traffic, attackers can spoof the connection and inject malicious keystrokes. The base station treats these inputs as legitimate, allowing the attacker to pivot from the scanner to a connected workstation or wider business network. This entry point enables unauthorized actors to conduct reconnaissance, steal sensitive data or deploy ransomware. The vulnerability affects devices from multiple manufacturers and extends to other equipment like portable data terminals and thermal printers. With over 180,000 warehouses globally, the potential attack surface is significant. Kaspersky advises organizations to implement strict network segmentation, disable unused Bluetooth interfaces and enforce robust authentication protocols. Experts emphasize that as retail and logistics operations become increasingly digitized, every connected device represents a potential security risk. Companies are urged to prioritize cybersecurity across all operational layers to prevent attackers from destabilizing their entire digital ecosystem through seemingly minor hardware components.
Source: Tech Radar
