HP LaserJet Printers Missing Authorization (CVE-2013-4807)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505350);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/05/28");

  script_cve_id("CVE-2013-4807");

  script_name(english:"HP LaserJet Printers Missing Authorization (CVE-2013-4807)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Unspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn,
M1212nf MFP, M1213nf MFP, M1214nfh MFP, M1216nfh MFP, M1217nfw MFP,
M1218nfs MFP, and CP1025nw with firmware before 20130703 allows
remote attackers to modify data via unknown vectors.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://support.hp.com/us-en/document/ish_10279029-10279054-16/hpsbpi02887
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?465688dd");
  script_set_attribute(attribute:"see_also", value:"http://osvdb.org/95907");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/bid/61565");
  script_set_attribute(attribute:"see_also", value:"http://www.securitytracker.com/id/1028869");
  script_set_attribute(attribute:"see_also", value:"https://exchange.xforce.ibmcloud.com/vulnerabilities/86178");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2013-4807");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(862);

  script_set_attribute(attribute:"vuln_publication_date", value:"2013/08/05");
  script_set_attribute(attribute:"patch_publication_date", value:"2013/08/05");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/05/26");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_pro_m1218nfs_mfp_firmware:20130703");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_pro_cp1025nw_firmware:20130703");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_pro_m1212nf_mfp_firmware:20130703");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_pro_m1213nf_mfp_firmware:20130703");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_pro_m1214nfh_mfp_firmware:20130703");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_pro_m1216nfh_multifunction_printer_firmware:20130703");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_pro_m1217nfw_multifunction_printer_firmware:20130703");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_pro_p1102w_firmware:20130703");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_pro_p1606dn_firmware:20130703");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/HP");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/HP');

var asset = tenable_ot::assets::get(vendor:'HP');

var vuln_cpes = {
    "cpe:/h:hp:laserjet_pro_cp1025nw_firmware:20130703" :
        {"versionEndExcluding" : "20130703", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_pro_m1214nfh_mfp_firmware:20130703" :
        {"versionEndExcluding" : "20130703", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_pro_p1606dn_firmware:20130703" :
        {"versionEndExcluding" : "20130703", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_pro_m1216nfh_multifunction_printer_firmware:20130703" :
        {"versionEndExcluding" : "20130703", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_pro_m1213nf_mfp_firmware:20130703" :
        {"versionEndExcluding" : "20130703", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_pro_m1212nf_mfp_firmware:20130703" :
        {"versionEndExcluding" : "20130703", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_pro_m1217nfw_multifunction_printer_firmware:20130703" :
        {"versionEndExcluding" : "20130703", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_pro_p1102w_firmware:20130703" :
        {"versionEndExcluding" : "20130703", "family" : "LaserJet"},
    "cpe:/h:hp:laserjet_pro_m1218nfs_mfp_firmware:20130703" :
        {"versionEndExcluding" : "20130703", "family" : "LaserJet"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);