Kaspersky experts identified a security vulnerability in barcode scanners that could allow unauthorized access to warehouse management systems. The flaw stems from a lack of authentication between the scanner and its base station, enabling attackers to exploit the wireless connection.
By intercepting the Bluetooth address of a base station, an attacker can transmit malicious payloads by simulating keystrokes. These inputs are processed by the connected computer as legitimate user commands, potentially leading to remote code execution without user interaction.
The research indicates that this attack vector affects devices from multiple manufacturers. Similar risks exist for other warehouse infrastructure equipment, such as data collection terminals and thermal printers, which are integrated into logistics and management networks.
Kaspersky recommends segmenting warehouse networks, disabling unused Bluetooth interfaces, and implementing robust authentication. Companies should also update security patches for management systems and conduct regular drills to model potential attack paths.