HP LaserJet P4014/P4015 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP LaserJet P4014/P4015 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

HP Color LaserJet CP4525 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP Color LaserJet CP4525 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

HP LaserJet P3015 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP LaserJet P3015 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

HP Color LaserJet CP4025 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP Color LaserJet CP4025 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

HP Printers CSRF Vulnerability (Oct 2018)

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129000052 and other firmware versions. This vulnerability is known as cross-site request forgery CSRF, and could potentially be exploited remotely to allow elevation of privilege. Copyright C 2018...

Command Execution Vulnerability in HP Color LaserJet Pro M252 Series

The HP Color LaserJet Pro M252 is a color laser printer manufactured by HP Trading Shanghai Co. A command execution vulnerability exists in the HP Color LaserJet Pro M252 series, which can be exploited by an attacker to execute remote commands...

Command execution vulnerability in multiple series of HP printers

HP LaserJet M1536,HP Officejet Pro X476,HP OfficeJet Pro 8740,HP LaserJet Professional M1200 are laser all-in-one PCs manufactured by HP Trading Shanghai Co. A command execution vulnerability exists in multiple series of HP printers, which can be exploited by an attacker to execute arbitrary...

Command Execution Vulnerability in HP LaserJet 5200 Series Printers

The HP LaserJet 5200 series is a printer from HP China. A command execution vulnerability exists in the HP LaserJet 5200 series printers, which can be exploited by an attacker to execute commands through port 9100...

Command Execution Vulnerability in HP LaserJet Professional P1600 Series Printers

HP LaserJet Professional P1600 is a printer series developed by Hewlett-Packard. A command execution vulnerability exists in the HP LaserJet Professional P1600 series of printers. An attacker could exploit the vulnerability to execute commands and gain server privileges...

HP Printers DLL Signature Validation Vulnerability (Jan 2018)

Multiple HP Printers perform insufficient Solution DLL Signature Validation, allowing for potential execution of arbitrary code. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cross-Site Scripting Vulnerability in Multiple HP Products

HP Color LaserJet CM4540 MFP CC419A and others are printer devices from Hewlett-Packard HP, USA. A cross-site scripting vulnerability exists in multiple HP products. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2017-2750

CVE-2017-2750 , as documented across multiple feeds, concerns HP printers where the vulnerability stems from insufficient DLL signature validation in the HP “Solution” package. Affected models include HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise...

HP Printing Security Advisory - KRACK Attacks Potential Vulnerabilities

Potential Security Impact KRACK Attacks VULNERABILITY SUMMARY On October 16, security researchers publicly announced vulnerabilities in the WiFi WPA2 standard. See the References section below for links to additional resources describing the KRACK Attacks WPA2 potential vulnerabilities in detail...

HP LaserJet Printers RCE (HPSBPI03569)

According to its model number and firmware revision, the remote HP LaserJet printer is affected by a remote code execution vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104812; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

Remote Code Execution Vulnerability in Multiple HP Products

HP Color LaserJet Enterprise M651 CZ255A and others are printer devices from Hewlett-Packard HP, USA. A remote code execution vulnerability exists in multiple HP products. A remote attacker could exploit the vulnerability to execute arbitrary code in the context of an affected application...

CVE-2017-9632

A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all...

CVE-2017-9630

An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions,...

Hacking Printers Advisory 2

TL;DR: In the scope of academic research on printer security, various vulnerabilities in network printers and MFPs have been discovered. This is advisory 2 of 6 of the Hacking Printers' series. Each advisory discusses multiple issues of the same category. This post is about accessing a printers...

惠普打印机设备 HP Color LaserJet 系列未授权访问漏洞

No description provided by source...

HP LaserJet Printers Unspecified Information Disclosure (HPSBPI03546)

According to its model number and firmware revision, the remote HP LaserJet printer is affected by an unspecified information disclosure vulnerability. An unauthenticated, remote attacker can exploit this vulnerability to obtain sensitive information via unspecified vectors. C Tenable Network...