Lucene search

CVE-2010-4107

🗓️ 17 Nov 2010 16:02:00Reported by hpType

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers enables remote attackers to read arbitrary files via a command inside a print job

Reporter	Title	Published	Views	Family All 23
seebug.org	HP Laser Jet - JavaScript Persistent XSS via PJL Directory Traversal	1 Jul 201400:00	–	seebug
seebug.org	HP LaserJet Directory Traversal in PJL Interface	1 Jul 201400:00	–	seebug
exploitpack	HP Laser Jet - JavaScript Persistent Cross-Site Scripting via PJL Directory Traversal	23 Apr 201400:00	–	exploitpack
exploitpack	HP LaserJet - Directory Traversal in PJL Interface	29 Nov 201000:00	–	exploitpack
0day.today	HP LaserJet Directory Traversal in PJL Interface	30 Nov 201000:00	–	zdt
0day.today	HP Laser Jet - JavaScript Persistent XSS via PJL Directory Traversal	3 May 201400:00	–	zdt
0day.today	HP JetDirect PJL Interface Universal Path Traversal	7 Aug 201100:00	–	zdt
securityvulns	[security bulletin] HPSBPI02575 SSRT090255 rev.1 - HP LaserJet MFP Printers, HP Color LaserJet MFP Printers, Certain HP LaserJet Printers, Remote Unauthorized Access to Files	18 Nov 201000:00	–	securityvulns
securityvulns	n.runs-SA-2010.003 - Hewlett Packard LaserJet MFP devices - Directory Traversal in PJL interface	30 Nov 201000:00	–	securityvulns
securityvulns	HP LaserJet Multi Functional Devices unauthorized access	30 Nov 201000:00	–	securityvulns

Nvd

Node

hp 9000

hp color_laserjet_mfp

Source	Link
vupen	www.vupen.com/english/advisories/2010/2987
itrc	www.itrc.hp.com/service/cki/docDisplay.do
securitytracker	www.securitytracker.com/id
securityreason	www.securityreason.com/securityalert/8328
securityfocus	www.securityfocus.com/bid/44882
secunia	www.secunia.com/advisories/42238
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/63261
nruns	www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf
exploit-db	www.exploit-db.com/exploits/15631

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Nov 2010 16:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS27.8

EPSS0.057

CWE-22

hp laserjet mfp printers security vulnerability cve-2010-4107 filesystem remote attack nvd