HPSBPI02507 SSRT100012 rev.3 - HP DreamScreen, Remote Disclosure of Information

Potential Security Impact

Remote disclosure of information

VULNERABILITY SUMMARY

A potential security vulnerability has been identified with web-connected HP DreamScreen. This vulnerability could be exploited remotely to allow disclosure of information.

RESOLUTION

HP has provided the following software update, DreamScreen firmware v1.6.0.0 or subsequent. The update is available to an Internet connected DreamScreen via the built-in automatic update method or by following the steps below:

1. Ensure the device is connected to the Internet
2. From the Home menu, select “Setup”
3. Highlight and select the “Info” tab
4. Highlight and select the “Software Update” button to start the update process