Kaspersky finds barcode scanner flaw exposing warehouse OT networks
Kaspersky researchers found some wireless barcode scanners lack authentication, allowing attackers to inject keystrokes and reach OT systems.
Kaspersky researchers have identified a new cyber attack path involving wireless barcode scanners used in logistics warehouses and retail, the company disclosed at Security Analyst Summit 2026 in Bali.
The flaw affects some barcode scanners from a major manufacturer that lack authentication between the scanner and its base station. An attacker within wireless range can eavesdrop on Bluetooth traffic to learn the base station address and send a malicious payload that mimics keyboard input.
The connected PC treats the injected input as a normal user command, potentially enabling remote code execution. A successful attack gives the attacker a foothold on an internal warehouse computer that serves as an entry point into the operational technology (OT) network.
Kaspersky warned that the same flaw could apply to other warehouse devices such as handheld data terminals and thermal printers, potentially allowing access to warehouse management systems (WMS).
Quick answers
What did Kaspersky find at Security Analyst Summit 2026?
It disclosed a lack of authentication between some wireless barcode scanners and their base stations, which can be exploited to reach warehouse OT networks.
How does the barcode scanner attack work?
An attacker within wireless range eavesdrops on Bluetooth traffic to learn the base station address and sends a malicious payload that mimics keyboard input, which the connected PC treats as a normal user command.