Weak authentication in wireless scanner systems could allow attackers to inject commands into connected computers, creating a pathway into warehouse operational technology and supply-chain infrastructure.
Barcode scanners, among the most routine devices in warehouses and retail operations, could provide cybercriminals with an unexpected route into critical business networks. Research by Kaspersky Security Services has identified vulnerabilities in widely used wireless barcode scanner systems that could allow attackers to compromise connected computers and potentially disrupt warehouse operations.
Presented at the Security Analyst Summit 2026 in Bali, the findings emerged from a security audit of a warehouse digital ecosystem. They highlight how the growing connectivity of logistics infrastructure is expanding the attack surface beyond conventional IT systems to include everyday operational devices.
The vulnerability centres on the communication between handheld barcode scanners and their base stations. In a typical deployment, the base station connects to a workstation or business system. Kaspersky researchers found that the absence of authentication between scanners and base stations could allow an attacker within wireless range to exploit the connection.
“Any technology at any tier can become an entry point for a cyberattack capable of destabilising the entire ecosystem even a single barcode scanner.”
— Sergey Sidorov, Head of Industrial Security Services, Kaspersky
By obtaining the base station’s Bluetooth address, potentially through passive monitoring of wireless traffic, an attacker could establish a connection and inject malicious keystrokes. These inputs would be forwarded to the connected computer and interpreted as legitimate keyboard activity. Under certain conditions, this could enable unauthorised command execution without user interaction. Researchers observed similar attack patterns across devices from multiple vendors.
The scanner itself is only the initial entry point. The greater risk lies in the workstation’s trusted access to warehouse networks and operational systems, including Warehouse Management Systems (WMS). Once inside, attackers could potentially use that connectivity to move deeper into the infrastructure.
The implications extend beyond logistics. Retailers and other businesses using wireless scanners, portable data terminals and thermal printers could face similar exposure.
“Modern retail and logistics are profoundly digital,” said Sergey Sidorov, Head of Industrial Security Services at Kaspersky, stressing that cybersecurity must extend to every connected device.
Kaspersky recommends strong device authentication, disabling unused Bluetooth interfaces, network segmentation, timely security updates and restricted user privileges. It also advises organisations to conduct attack-path assessments that include seemingly low-risk operational equipment.
The research reinforces a critical supply-chain security lesson: securing warehouse infrastructure requires visibility and protection across the entire technology ecosystem, not just servers, applications and corporate networks.