[security bulletin] HPSBPI02728 SSRT100692 rev.1 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03102449 Version: 1 HPSBPI02728 SSRT100692 rev.1 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default NOTICE: The information in this Security Bulletin should b...

CVE-2011-4161

The CVE-2011-4161 issue affects multiple HP printers/receivers where the Remote Firmware Update (RFU) feature is enabled by default. An unauthenticated session on TCP port 9100 could upload hostile firmware, enabling remote code execution and potentially impacting confidentiality, integrity, and ...