HP LaserJet Printers Cryptographic Issues (CVE-2013-4828)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505932);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/04");

  script_cve_id("CVE-2013-4828");

  script_name(english:"HP LaserJet Printers Cryptographic Issues (CVE-2013-4828)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet
Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and
M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not
properly encrypt PDF documents, which allows remote attackers to
obtain sensitive information via unspecified vectors.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4b1c7465");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2013-4828");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(310);

  script_set_attribute(attribute:"vuln_publication_date", value:"2013/10/04");
  script_set_attribute(attribute:"patch_publication_date", value:"2013/10/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/03");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_cm4540:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_cm4540f:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_cm4540fskm:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_m575dn:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_m575f:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_m775dn:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_m775f:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_m775z%2b:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:color_laserjet_m775z:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_enterprise_color_flow_m575c:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_flow_m525c:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_m4555:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_m4555f:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_m4555fskm:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_m4555h:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_m525dn:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_m525f:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_m725dn:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_m725f:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_m725z%2b:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:hp:laserjet_m725z:-");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/HP");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/HP');

var asset = tenable_ot::assets::get(vendor:'HP');

var vuln_cpes = {
    "cpe:/h:hp:color_laserjet_cm4540:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:color_laserjet_cm4540f:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:color_laserjet_cm4540fskm:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:color_laserjet_m575dn:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:color_laserjet_m575f:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:color_laserjet_m775dn:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:color_laserjet_m775f:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:color_laserjet_m775z:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:color_laserjet_m775z%2b:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_enterprise_color_flow_m575c:-" :
        {"family" : "LaserJetEnterprise"},
    "cpe:/h:hp:laserjet_flow_m525c:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_m4555:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_m4555f:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_m4555fskm:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_m4555h:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_m525dn:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_m525f:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_m725dn:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_m725f:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_m725z:-" :
        {"family" : "LaserJet"},
    "cpe:/h:hp:laserjet_m725z%2b:-" :
        {"family" : "LaserJet"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);