137 matches found
DEF CON 2018: Critical Bug Opens Millions of HP OfficeJet Printers to Attack
LAS VEGAS – Tens of millions of fax-ready HP OfficeJet inkjet printers are vulnerable to a simple hack that gives an attacker full control over a targeted printer. Once compromised, the all-in-one OfficeJet could act as a springboard for deeper network penetration by an attacker. Here at DEF CON,...
Command execution vulnerability in multiple series of HP printers
HP LaserJet M1536,HP Officejet Pro X476,HP OfficeJet Pro 8740,HP LaserJet Professional M1200 are laser all-in-one PCs manufactured by HP Trading Shanghai Co. A command execution vulnerability exists in multiple series of HP printers, which can be exploited by an attacker to execute arbitrary...
HP Printers DLL Signature Validation Vulnerability (Jan 2018)
Multiple HP Printers perform insufficient Solution DLL Signature Validation, allowing for potential execution of arbitrary code. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
HP Pagewide and OfficeJet Printers RCE Vulnerability (Jan 2018)
A potential security vulnerability has been identified with HP PageWide Printers and HP OfficeJet Pro Printers. This vulnerability could potentially be exploited to execute arbitrary code. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources...
CVE-2017-2741
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code...
CVE-2017-2750
CVE-2017-2750 , as documented across multiple feeds, concerns HP printers where the vulnerability stems from insufficient DLL signature validation in the HP “Solution” package. Affected models include HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise...
HP Printing Security Advisory - KRACK Attacks Potential Vulnerabilities
Potential Security Impact KRACK Attacks VULNERABILITY SUMMARY On October 16, security researchers publicly announced vulnerabilities in the WiFi WPA2 standard. See the References section below for links to additional resources describing the KRACK Attacks WPA2 potential vulnerabilities in detail...
HP OfficeJet Printers RCE (HPSBPI03569)
According to its model number and firmware revision, the remote HP OfficeJet printer is affected by a remote code execution vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104813; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...
HP Printer Remote Command Execution Vulnerability
The HP OfficeJet Pro 8210 is an all-in-one printer from HP. A remote command execution vulnerability exists in HP printers. The vulnerability allows attackers to execute arbitrary code...
HP PageWide Printers / HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary Code Execution
No description provided by source. Create a bind shell on an unpatched OfficeJet 8210 Write a script to profile.d and reboot the device. When it comes back online then nc to port 1270. easysnmp instructions: sudo apt-get install libsnmp-dev pip install easysnmp import socket import sys from...
HP PageWide Printers/HP OfficeJet Pro Printers Arbitrary Code Execution Vulnerability
The HP Officejet 8500A is a print/copy/scan/fax MFP from HP. An arbitrary code execution vulnerability exists in HP PageWide Printers / HP OfficeJet Pro Printers OfficeJet Pro 8210. The vulnerability allows an attacker to execute arbitrary code...
HP PageWide Printers / HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary Code Execution Exp
Exploit for hardware platform in category remote exploits Create a bind shell on an unpatched OfficeJet 8210 Write a script to profile.d and reboot the device. When it comes back online then nc to port 1270. easysnmp instructions: sudo apt-get install libsnmp-dev pip install easysnmp import socke...
HP PageWide Printers HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary Code Execution
HP PageWide Printers HP OfficeJet Pro Printers OfficeJet Pro 8210 - Arbitrary Code Execution Create a bind shell on an unpatched OfficeJet 8210 Write a script to profile.d and reboot the device. When it comes back online then nc to port 1270. easysnmp instructions: sudo apt-get install libsnmp-de...
HP PageWide / OfficeJet Pro Printers Arbitrary Code Execution
Create a bind shell on an unpatched OfficeJet 8210 Write a script to profile.d and reboot the device. When it comes back online then nc to port 1270. easysnmp instructions: sudo apt-get install libsnmp-dev pip install easysnmp import socket import sys from easysnmp import snmpset profiledscript =...
Unauthorized Access Vulnerability in HP Officejet Pro X451dw Printer
The HP Officejet Pro X451dw is a desktop printer from HP. An unauthorized access vulnerability exists in the HP Officejet Pro X451dw Printer, which can be exploited by an attacker to gain unauthorized access to configuration pages and obtain sensitive information...
HP OfficeJet Pro Wi-Fi Direct Support Printer Configuration Unauthenticated Access
The remote HP OfficeJet Pro printer is using a default configuration that lacks access controls and authentication for the Wi-Fi Direct Support feature. An unauthenticated, remote attacker can exploit this to gain read and write access to the printer configuration in the embedded web server. C...
HP OfficeJet Printers Unspecified Information Disclosure (HPSBPI03546)
According to its model number and firmware revision, the remote HP OfficeJet printer is affected by an unspecified information disclosure vulnerability. An unauthenticated, remote attacker can exploit this vulnerability to obtain sensitive information via unspecified vectors. C Tenable Network...
Multiple HP Products Information Disclosure Vulnerabilities
HP LaserJet Printers, HP LaserJet MFPs and HP OfficeJet Enterprise Printers are printer products developed by Hewlett-Packard HP in the United States. An information disclosure vulnerability exists in several HP products, which can be exploited by remote attackers to disclose sensitive informatio...