CVE-2011-3163

HP MFP Digital Sending Software (DSS) on Windows, versions 4.9x up to 4.91.21, is affected by a local information-disclosure vulnerability that could reveal personal workflow metadata. Public details from HP’s Security Bulletin HPSBPI02711 (SSRT100647 rev.1/ rev.2) indicate only versions up to 4....

PT-2011-4283

Name of the Vulnerable Software and Affected Versions HP MFP Digital Sending Software versions 4.9x through 4.91.21 Description The issue allows local users to obtain sensitive workflow-metadata information. Recommendations For HP MFP Digital Sending Software versions 4.9x through 4.91.21, at the...

CVE-2011-3163: Exposure of Sensitive Information to an Unauthorized Actor

HP MFP Digital Sending Software 4.9x through 4.91.21 allows local users to obtain sensitive workflow-metadata information via unspecified vectors...

HPSBPI02711 SSRT100647 rev.2 - HP MFP Digital Sending Software Running on Windows, Local Information Disclosure

Potential Security Impact Local information disclosure VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP MFP Digital Sending Software running on Windows. The vulnerability could result in disclosure of personal information contained in workflow metadata to...

HP MFP Digital Sending Software configured devices unauthenticated access

No description provided...

[security bulletin] HPSBPI02640 SSRT100410 rev.1 - HP MFP Digital Sending Software Running on Windows, Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02738104 Version: 1 HPSBPI02640 SSRT100410 rev.1 - HP MFP Digital Sending Software Running on Windows, Authentication Bypass NOTICE: The information in this Security Bulletin should be acted upon...

HP MFP Digital Sending Software 4.91.0 Local Authentication Bypass

The remote Windows host contains HP MFP Digital Sending Software version 4.91.0. This version is potentially affected by an authentication bypass vulnerability related to device configuration templates. A local attacker, exploiting this flaw, reportedly can gain unauthorized access to functionali...

CVE-2011-0279

CVE-2011-0279 affects HP MFP Digital Sending Software (DSS) 4.91.00. The vulnerability arises from improper configuration of authentication settings in device templates, enabling a local attacker to access managed devices without authentication for actions that normally require it. The HP Securit...

PT-2011-2253

Name of the Vulnerable Software and Affected Versions HP Multifunction Peripheral MFP Digital Sending Software DSS version 4.91.00 Description The issue arises from improper configuration of authentication settings for managed devices within device templates. This allows attackers to access these...

CVE-2011-0279: Improper Authentication

HP Multifunction Peripheral MFP Digital Sending Software DSS 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication...

HPSBPI02640 SSRT100410 rev.2 - HP MFP Digital Sending Software Running on Windows, Authentication Bypass

Potential Security Impact Authentication bypass VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP MFP Digital Sending Software running on Windows. The vulnerability could cause authentication to be disabled for managed devices. This could allow access to the...

HP LaserJet printer PJL interface directory traversal vulnerability-vulnerability warning-the black bar safety net

HP LaserJet is HP printer, comprising a plurality of models. HP LaserJet to the MFP device in the PJL file system access interface there is a directory traversal vulnerability that could lead to sensitive information disclosure and is likely to be modified. This includes the background processing...

n.runs-SA-2010.003 - Hewlett Packard LaserJet MFP devices - Directory Traversal in PJL interface

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.003 16-Nov-2010 Vendor: Hewlett-Packard, http://www.hp.com Affected Products: Various HP LaserJet MFP devices See HP advisory 3 for the complete list Vulnerability: Directory Traversal in PJL interface Risk: HIGH Vendor...

HP LaserJet PJL Interface Directory Traversal

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.003 16-Nov-2010 Vendor: Hewlett-Packard, http://www.hp.com Affected Products: Various HP LaserJet MFP devices See HP advisory 3 for the complete list Vulnerability: Directory Traversal in PJL interface Risk: HIGH Vendor...

CVE-2010-4107

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers...

CVE-2010-4107

CVE-2010-4107 affects HP LaserJet MFPs and select LaserJet models (e.g., 4100/4200/4300/5100/8150/9000) where the PJL File System External Access is misconfigured by default. The issue allows an attacker to read arbitrary files on the device by sending PJL directory traversal via a print job, lev...

PT-2010-5302

Name of the Vulnerable Software and Affected Versions HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers affected versions not specified Description The default configuration of the PJL Access value in the File System External Acces...

CVE-2010-4107: Improper Limitation of a Pathname to a Restricted Directory

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers...

Ricoh Aficio Web Image Monitor 2.03 Cross Site Scripting

I was poking at some Ricoh MFPs several days ago, when I found this. It is nothing to get to terribly excited about as it's just a reflected XSS. However, the ability to abuse any trusted internal IP should be considered a threat. Companies have taken big hits from less. So without further ado,...

HP MFP Digital Sending Software < 4.18.3 Local Unspecified Authentication Bypass

The remote Windows host contains a version of HP MFP Digital Sending Software earlier than 4.18.3. Such versions are potentially affected by an unspecified authentication bypass vulnerability. A local attacker, exploiting this flaw, reportedly can gain unauthorized access to 'Send to email' and...