Kaspersky Finds Barcode Scanner Vulnerabilities That Could Threaten Warehouse Security

Kaspersky researchers have identified a potential cyberattack route through a widely used barcode scanner model, raising security concerns for e-commerce supply chains. The findings were presented at the Security Analyst Summit 2026 in Bali as part of an assessment of warehouse digital infrastructure.

Modern warehouses are complex digital environments that combine multiple technologies, devices and interconnected systems. With global e-commerce sales nearly doubling since 2019 to more than $6 trillion, disruptions or delivery delays can lead to significant financial and reputational damage.

To identify potential security risks, Kaspersky Security Services researchers investigated several cyberattack vectors targeting warehouse infrastructure, including attacks involving devices used in warehouse operations. Their research uncovered a vulnerability in a barcode scanner model from a major manufacturer. Barcode scanners of this type are widely used across warehousing, retail and other industries.

A typical configuration involves handheld scanners communicating with a base station, which connects to a workstation or another business system. According to Kaspersky, a key weakness is the absence of authentication between the scanner and its base station.

Wireless Barcode Scanners Could Provide Access to Warehouse Networks

Kaspersky's findings indicate that vulnerable scanners could provide an entry point into a warehouse's operational technology (OT) network. Researchers found that an attacker within wireless range could inject keystrokes into a connected device and potentially achieve remote code execution without requiring user interaction.

In a hypothetical attack scenario, an employee could be using a wireless barcode scanner connected to a base station during routine warehouse operations. Meanwhile, an attacker might obtain the base station's Bluetooth address, for example, by passively monitoring Bluetooth traffic.

After establishing a Bluetooth connection, the attacker could transmit a malicious payload to the base station in the form of simulated keyboard keystrokes. The base station would then forward those keystrokes to the connected computer, where they could be interpreted as legitimate user input and potentially used to execute unauthorized commands.

Kaspersky researchers observed this attack pattern across devices from multiple vendors.

Infographic illustrating an attack through a barcode scanner's wireless connection.

The consequences could extend beyond the scanner itself. An attacker might gain an initial foothold on a computer connected to the warehouse network. The scanner would serve as the entry point, while the connected computer's trusted position and access to critical operational systems could create opportunities for further compromise.

These vulnerabilities could affect not only warehouses but also retail businesses and other sectors that rely on similar devices.

Kaspersky researchers also believe comparable attack scenarios could potentially involve other warehouse equipment, including Portable Data Terminals (PDTs) and thermal printers, to gain access to infrastructure such as Warehouse Management Systems (WMS).

Kaspersky Highlights the Need for Security Across Warehouse Operations

“Modern retail and logistics are profoundly digital, from enterprise-wide management platforms down to every device in a worker’s hands. This pervasive connectivity means that any technology at any tier can become an entry point for a cyberattack capable of destabilizing the entire ecosystem — as our research shows, even a single barcode scanner. The warehouse sector, and the broader retail industry, should treat cybersecurity as a top priority across every layer of their operations,” said Sergey Sidorov, Head of Industrial Security Services at Kaspersky.

Security Measures Recommended for Warehouse Environments

To strengthen warehouse security, Kaspersky experts recommend several measures:

• Verify new devices: Assess every device before connecting it to the network.

• Disable unused Bluetooth interfaces: Reduce unnecessary wireless exposure by turning off interfaces that are not required.

• Enforce strong authentication: Implement appropriate authentication mechanisms for connected devices and systems.

• Segment warehouse networks: Restrict network connections to those essential for business operations.

• Apply security updates promptly: Keep devices and Warehouse Management Systems updated.

• Limit account permissions: Grant users and accounts only the minimum access necessary to perform their tasks.

• Conduct attack-path exercises: Regularly test security through comprehensive exercises that include scenarios involving insiders with legitimate credentials.

Kaspersky Offers Industrial Security Assessments

Kaspersky provides assessments of industrial environments to identify weaknesses in industrial control systems (ICS), operational technology and network-connected devices. These assessments examine configurations and access paths, mapping vulnerabilities to help organizations understand and address actionable risks.

Through its Kaspersky ICS Security Assessment, the company evaluates systems on-site to uncover hidden risks and provide actionable insights without disrupting operations.

Organizations can also strengthen their security with Kaspersky Industrial Cyber Security (KICS), a platform designed to protect industrial organizations, including logistics businesses. It helps improve visibility across corporate infrastructure and strengthen cybersecurity while supporting operational continuity and system availability.