Lucene search
K

CVE-2009-0940

🗓️ 18 Mar 2009 20:35:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 72 Views🌐 WEB

HP Embedded Web Server (EWS) CSRF vulnerabilitie

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2009-0940
18 Mar 200920:35
cvelist
EUVD
EUVD-2009-0937
7 Oct 202500:30
euvd
NVD
CVE-2009-0940
18 Mar 200921:00
nvd
Prion
Cross site request forgery (csrf)
18 Mar 200921:00
prion
Tenable Nessus
HP Printer Cross-Site Request Forgery (CVE-2009-0940)
30 Apr 202600:00
nessus
NVD
Node
OROROROROROROROROROROROR
hpcolor_laserjet_4370mfpMatch20081211_46.211.2
OROROROROROROROROROROROROROR
hpcolor_laserjet_9500mfpMatch20070719_05.011.2
OR
hpcolor_mfp_cm8050Match--edgeline
OR
hpcolor_mfp_cm8060Match--edgeline
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROR
hplaserjet_2410Match20070410_08.112.3
OR
hplaserjet_2420Match20070410_08.112.3
OROR
hplaserjet_2430Match20070410_08.112.3
OROROROROROROROROROROROROROROROROROROROROROR
hplaserjet_4250Match20080319_08.015.0
OROROR
hplaserjet_4345mfpMatch20081211_09.131.1
OROR
hplaserjet_4350Match20080319_08.015.0
OROROROROROROROROROROROR
hplaserjet_5000Matchr.25.15
OR
hplaserjet_5000Matchr.25.47
OROR
hplaserjet_5100Matchv.29.12
OROROROROROROROROROROROROROROR
hplaserjet_9040Match20080204_08.110.0
OROR
hplaserjet_9040mfpMatch20080204_08.110.0
OROR
hplaserjet_9050Match20080204_08.110.0
OROROR
hplaserjet_9050mfpMatch20080204_08.110.0
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROR
ParameterPositionPathDescriptionCWE
NetIPChangepathhp/device/config_result_YesNo.html/configCSRF enables modification of network configuration via NetIPChange on HP EWS.CWE-352
Passwordpathhp/device/set_config_password.html/configCSRF enables changing administrator password via Password and ConfirmPassword parameters.CWE-352
ConfirmPasswordpathhp/device/set_config_password.html/configCSRF enables changing administrator password via Password and ConfirmPassword parameters.CWE-352

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation