Full Report
Microsoft has fixed a known issue causing some USB printers to start printing random text after installing Windows updates released since late January 2025. [...]
Analysis Summary
# Vulnerability: Microsoft Update Caused Unexpected Printer Output via IPP Protocol
## CVE Details
- CVE ID: N/A (This appears to be a known issue/bug fix rather than a traditional remote vulnerability, no CVE assigned in the summary)
- CVSS Score: N/A
- CWE: N/A
## Affected Systems
- Products: Windows (Specific versions impacted by the January 2025 preview update KB5050092 and later updates)
- Versions: Windows 10 22H2 (mentioned in reference), Windows 11 24H2 (mentioned in related issue)
- Configurations: Dual-mode USB connected printers that support both USB Print and IPP (Internet Printing Protocol) Over USB protocols.
## Vulnerability Description
Recent Windows preview updates, specifically KB5050092 released on January 29, 2025, caused an issue where affected USB-connected, dual-mode printers would unexpectedly print random text and data. This text often included network commands starting with the header "POST /ipp/print HTTP/1.1," indicating an issue with how the print spooler handles IPP protocol messages sent to the printer, especially when the printer is turned on or reconnected.
## Exploitation
- Status: Not applicable/Not exploited (This describes undesirable operational behavior caused by a patch, not an exploitable security vulnerability leading to compromise.)
- Complexity: N/A
- Attack Vector: N/A
## Impact
- Confidentiality: Low (Exposure of network/internal data potentially contained within the print job remnants or commands.)
- Integrity: Low (Data corruption on paper, printing unexpected commands.)
- Availability: Low (Temporary disruption of printing functionality.)
## Remediation
### Patches
- The issue causing random text printing (related to KB5050092) is being addressed via Known Issue Rollback (KIR) to reverse the flawed non-security update.
- A general fix will be included in a future Windows Update.
### Workarounds
- The primary mechanism for resolution mentioned is Microsoft's Known Issue Rollback (KIR), which automatically reverses the problematic behavior for affected systems.
## Detection
- Indicators of Compromise: Printers unexpectedly outputting documents containing text such as "POST /ipp/print HTTP/1.1" or other IPP-related headers/random characters.
- Detection Methods and Tools: Monitoring print job logs and user reports for erratic printing behavior immediately following the installation of recent Windows updates (January 2025 preview updates or later).
## References
- Vendor advisories: Microsoft documentation regarding Windows 10 22H2 status (linked within the source).
- Relevant links - defanged:
- hxxps://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-printing-issues-caused-by-january-windows-updates/
- hxxps://support.microsoft.com/help/5050092 (KB article reference)
- hxxps://learn.microsoft.com/en-us/windows/release-health/status-windows-10-22h2#usb-printers-might-print-random-text-with-the-january-2025-preview-update