CVE-2004-2439

The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware...

CVE-2002-1797

ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce access control restrictions, which could allow local users to add, delete, or modify any services hosted by the ChaiServer...

PT-2002-2518 · Hewlett Packard · Chaivm Ezloader

Name of the Vulnerable Software and Affected Versions: ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 affected versions not specified Description: The issue is related to the improper verification of JAR signatures for new services in ChaiVM EZloader. This allow...

CVE-2001-1040

CVE-2001-1040 affects HP LaserJet and possibly other JetDirect devices, where certain power-off behavior resets the admin password. The result is that a remote attacker could gain administrative access without a password after the device is turned off, per the available description. The provided ...

CVE-2001-1040

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password...

CVE-1999-1061

CVE-1999-1061 affects HP LaserJet printers with JetDirect network cards configured for TCP/IP. The vulnerability allows unauthenticated remote access to the printer, enabling an attacker to change the printer’s IP address or disable logging. Public details from OpenVAS/Nessus describe an unauthen...

CVE-1999-1061

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging...

CVE-1999-1062

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100...

CVE-1999-1062

CVE-1999-1062 affects HP LaserJet printers with JetDirect network cards configured for TCP/IP. The root issue is that remote attackers can bypass print filters by directly sending PostScript to TCP ports 9099 and 9100, potentially enabling unauthenticated printing or misuse of the printer. The co...

CVE-2001-1040

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password...

jetdirect.crash.txt

--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Hi folks! I just played with our network printer a HP LaserJet 4500 and -- boom -- it crashed ;-=20 The HP JetDirect J3111A module with firmware G.05.35 suffers from a buffer overflow in it's...

HP LaserJet LCD Display Modification

It may be possible to remotely change the printer's display text. Please check the printer display, and if it is set to 'Nessus' then the test succeeded. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10103;...

HP LaserJet Printer Unauthenticated Access

The remote printer has no password set. This allows anyone to change its IP or potentially to intercept print jobs sent to it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10172; scriptversion "1.29"; scriptcvsdate"Date: 2018/07/24 18:56:11";...

HP LaserJet Direct Print Filter Bypass

By connecting to this port directly, a remote attacker can send Postscript directly to the remote printer, bypassing lpd and page accounting. This is a threat, because an attacker may connect to this printer, force it to print pages of garbage, and make it run out of paper. If this printer is use...

CVE-1999-1062

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100...

CVE-1999-1061

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging...