Lucene search

[email protected]CVE-2009-0941

HistoryMar 18, 2009 - 9:00 p.m.

CVE-2009-0941

2009-03-1821:00:00

CWE-264

[email protected]

web.nvd.nist.gov

embedded web server

ews

laserjet printers

edgeline printers

digital senders

management password

remote access

vulnerability

cve-2009-0941

7.6 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.0%

JSON

The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.

CPENameOperatorVersion
hp:laserjet_p4010hp laserjet p4010eq*
hp:laserjet_2600nhp laserjet 2600neq*
hp:color_laserjet_4370mfphp color laserjet 4370mfpeq20081211_46.211.2
hp:laserjet_4200hp laserjet 4200eq*
hp:laserjet_iihp laserjet iieq*
hp:color_laserjet_2500lhp color laserjet 2500leq*
hp:laserjet_2600chp laserjet 2600ceq*
hp:laserjet_4100_mfphp laserjet 4100 mfpeq*
hp:laserjet_p1006hp laserjet p1006eq*
hp:laserjet_4200lnhp laserjet 4200lneq*

CPE	Name	Operator	Version
hp:laserjet_p4010	hp laserjet p4010	eq	*
hp:laserjet_2600n	hp laserjet 2600n	eq	*
hp:color_laserjet_4370mfp	hp color laserjet 4370mfp	eq	20081211_46.211.2
hp:laserjet_4200	hp laserjet 4200	eq	*
hp:laserjet_ii	hp laserjet ii	eq	*
hp:color_laserjet_2500l	hp color laserjet 2500l	eq	*
hp:laserjet_2600c	hp laserjet 2600c	eq	*
hp:laserjet_4100_mfp	hp laserjet 4100 mfp	eq	*
hp:laserjet_p1006	hp laserjet p1006	eq	*
hp:laserjet_4200ln	hp laserjet 4200ln	eq	*

Rows per page:

1-10 of 1641

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566

www.louhinetworks.fi/advisory/HP_20090317.txt

www.securityfocus.com/archive/1/501884/100/0/threaded

www.vupen.com/english/advisories/2009/0754

7.6 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.0%

JSON

Related for CVE-2009-0941

cvelist1 prion1