CVE-2012-3273

CVE-2012-3273 affects HP LaserJet Pro 400 MFP M425 (firmware 20120625) and LaserJet Pro 400 M401 (firmware 20120621). The HP Security Bulletin notes multiple unspecified vulnerabilities that could be remotely exploited to obtain sensitive information and allow remote unauthorized access. Affected...

CVE-2012-1239

The vulnerability CVE-2012-1239 affects Toshiba TEC e‑Studio MFPs via the TopAccess web-based management interface. Firmware 30x–302, 35x–354, and 4xx–421 allow remote attackers to bypass authentication and gain administrative privileges. Documented impact: administrative access with potential cr...

Print of one malicious document can expose your whole LAN

Print of one malicious document can expose your whole LAN This year at Chaos Communications Congress 28C3 Ang Cui presents Print Me If You Dare, in which he explained how he reverse-engineered the firmware-update process for HPs hundreds of millions of printers and In Andrei Costin's presentation...

Default configuration

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables...

HP MFP Digital Sending Software 4.9x <= 4.91.21 Local Workflow Metadata Information Disclosure

The remote Windows host contains a version of HP MFP Digital Sending Software version 4.9x that's 4.91.21 or earlier. It is reportedly affected by a local information disclosure vulnerability that could result in disclosure of personal information in workflow metadata. C Tenable Network Security,...

HP MFP Digital Sending Software information leakage

No description provided...

[security bulletin] HPSBPI02711 SSRT100647 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03052686 Version: 1 HPSBPI02711 SSRT100647 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Information Disclosure NOTICE: The information in this Security Bulletin should be act...

CVE-2011-3163

HP MFP Digital Sending Software 4.9x through 4.91.21 allows local users to obtain sensitive workflow-metadata information via unspecified vectors...

Design/Logic Flaw

HP MFP Digital Sending Software 4.9x through 4.91.21 allows local users to obtain sensitive workflow-metadata information via unspecified vectors...

CVE-2011-3163

HP MFP Digital Sending Software (DSS) on Windows, versions 4.9x up to 4.91.21, is affected by a local information-disclosure vulnerability that could reveal personal workflow metadata. Public details from HP’s Security Bulletin HPSBPI02711 (SSRT100647 rev.1/ rev.2) indicate only versions up to 4....

CVE-2011-3163

HP MFP Digital Sending Software 4.9x through 4.91.21 allows local users to obtain sensitive workflow-metadata information via unspecified vectors...

HPSBPI02711 SSRT100647 rev.2 - HP MFP Digital Sending Software Running on Windows, Local Information Disclosure

Potential Security Impact Local information disclosure VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP MFP Digital Sending Software running on Windows. The vulnerability could result in disclosure of personal information contained in workflow metadata to...

HP MFP Digital Sending Software configured devices unauthenticated access

No description provided...

[security bulletin] HPSBPI02640 SSRT100410 rev.1 - HP MFP Digital Sending Software Running on Windows, Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02738104 Version: 1 HPSBPI02640 SSRT100410 rev.1 - HP MFP Digital Sending Software Running on Windows, Authentication Bypass NOTICE: The information in this Security Bulletin should be acted upon...

HP MFP Digital Sending Software 4.91.0 Local Authentication Bypass

The remote Windows host contains HP MFP Digital Sending Software version 4.91.0. This version is potentially affected by an authentication bypass vulnerability related to device configuration templates. A local attacker, exploiting this flaw, reportedly can gain unauthorized access to functionali...

CVE-2011-0279

CVE-2011-0279 affects HP MFP Digital Sending Software (DSS) 4.91.00. The vulnerability arises from improper configuration of authentication settings in device templates, enabling a local attacker to access managed devices without authentication for actions that normally require it. The HP Securit...

HPSBPI02640 SSRT100410 rev.2 - HP MFP Digital Sending Software Running on Windows, Authentication Bypass

Potential Security Impact Authentication bypass VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP MFP Digital Sending Software running on Windows. The vulnerability could cause authentication to be disabled for managed devices. This could allow access to the...

HP LaserJet printer PJL interface directory traversal vulnerability-vulnerability warning-the black bar safety net

HP LaserJet is HP printer, comprising a plurality of models. HP LaserJet to the MFP device in the PJL file system access interface there is a directory traversal vulnerability that could lead to sensitive information disclosure and is likely to be modified. This includes the background processing...

HP LaserJet PJL Interface Directory Traversal

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.003 16-Nov-2010 Vendor: Hewlett-Packard, http://www.hp.com Affected Products: Various HP LaserJet MFP devices See HP advisory 3 for the complete list Vulnerability: Directory Traversal in PJL interface Risk: HIGH Vendor...

n.runs-SA-2010.003 - Hewlett Packard LaserJet MFP devices - Directory Traversal in PJL interface

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.003 16-Nov-2010 Vendor: Hewlett-Packard, http://www.hp.com Affected Products: Various HP LaserJet MFP devices See HP advisory 3 for the complete list Vulnerability: Directory Traversal in PJL interface Risk: HIGH Vendor...