Lucene search

K
cveMitreCVE-2001-1040
HistoryFeb 02, 2002 - 5:00 a.m.

CVE-2001-1040

2002-02-0205:00:00
mitre
web.nvd.nist.gov
23
hp laserjet
jetdirect devices
admin password reset
remote attacks
nvd
cve-2001-1040

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

AI Score

7.3

Confidence

Low

EPSS

0.003

Percentile

67.9%

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.

Affected configurations

Nvd
Node
hpjetadminMatch4.0
OR
hpjetadminMatch4.1.2
OR
hpjetadminMatch5.1
OR
hpjetadminMatch5.5
OR
hpjetadminMatch5.5.177
OR
hpjetadminMatch5.6
OR
hpjetadminMatch6.0
OR
hpjetadminMatch6.1
OR
hpjetadminMatch6.2
VendorProductVersionCPE
hpjetadmin4.0cpe:2.3:a:hp:jetadmin:4.0:*:*:*:*:*:*:*
hpjetadmin4.1.2cpe:2.3:a:hp:jetadmin:4.1.2:*:*:*:*:*:*:*
hpjetadmin5.1cpe:2.3:a:hp:jetadmin:5.1:*:*:*:*:*:*:*
hpjetadmin5.5cpe:2.3:a:hp:jetadmin:5.5:*:*:*:*:*:*:*
hpjetadmin5.5.177cpe:2.3:a:hp:jetadmin:5.5.177:*:*:*:*:*:*:*
hpjetadmin5.6cpe:2.3:a:hp:jetadmin:5.6:*:*:*:*:*:*:*
hpjetadmin6.0cpe:2.3:a:hp:jetadmin:6.0:*:*:*:*:*:*:*
hpjetadmin6.1cpe:2.3:a:hp:jetadmin:6.1:*:*:*:*:*:*:*
hpjetadmin6.2cpe:2.3:a:hp:jetadmin:6.2:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

AI Score

7.3

Confidence

Low

EPSS

0.003

Percentile

67.9%

Related for CVE-2001-1040