HP PageWide / OfficeJet Pro Printers Arbitrary Code Execution

Create a bind shell on an unpatched OfficeJet 8210 Write a script to profile.d and reboot the device. When it comes back online then nc to port 1270. easysnmp instructions: sudo apt-get install libsnmp-dev pip install easysnmp import socket import sys from easysnmp import snmpset profiledscript =...

Unauthorized Access Vulnerability in HP Officejet Pro X451dw Printer

The HP Officejet Pro X451dw is a desktop printer from HP. An unauthorized access vulnerability exists in the HP Officejet Pro X451dw Printer, which can be exploited by an attacker to gain unauthorized access to configuration pages and obtain sensitive information...

HP OfficeJet Pro Wi-Fi Direct Support Printer Configuration Unauthenticated Access

The remote HP OfficeJet Pro printer is using a default configuration that lacks access controls and authentication for the Wi-Fi Direct Support feature. An unauthenticated, remote attacker can exploit this to gain read and write access to the printer configuration in the embedded web server. C...

HP OfficeJet Printers Unspecified Information Disclosure (HPSBPI03546)

According to its model number and firmware revision, the remote HP OfficeJet printer is affected by an unspecified information disclosure vulnerability. An unauthenticated, remote attacker can exploit this vulnerability to obtain sensitive information via unspecified vectors. C Tenable Network...

Multiple HP Products Information Disclosure Vulnerabilities

HP LaserJet Printers, HP LaserJet MFPs and HP OfficeJet Enterprise Printers are printer products developed by Hewlett-Packard HP in the United States. An information disclosure vulnerability exists in several HP products, which can be exploited by remote attackers to disclose sensitive informatio...

CVE-2016-2244

HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-2244

HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors...

Information disclosure

HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-2244

HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-2244

CVE-2016-2244 concerns information disclosure in HP LaserJet printers, HP LaserJet MFPs, and HP OfficeJet Enterprise printers with firmware before 3.7.01. The vulnerability exposes sensitive information to remote attackers via unspecified vectors; the exact root cause is not detailed in the provi...

PT-2016-5077

Name of the Vulnerable Software and Affected Versions HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware prior to 3.7.01 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors. Recommendations For HP LaserJet printers and...

CVE-2016-2244: Exposure of Sensitive Information to an Unauthorized Actor

HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors...

HP OfficeJet Printer Security Bypass (HPSBPI03107)

The remote HP OfficeJet printer is affected by a security bypass vulnerability. The included OpenSSL library has a security bypass flaw in the handshake process. By using a specially crafted handshake, a remote attacker can force the use of weak keying material. This could be leveraged for a...

HP OfficeJet Printer Detection

Binary data hpofficejetwebdetect.nbin...

HP OfficeJet Pro 8500 XSS

According to its self-reported build information, the firmware running on the remote HP OfficeJet printer is affected by a cross-site scripting vulnerability that could allow an attacker to create a malicious link containing script code that will be executed in the browser of an unsuspecting user...

HP OfficeJet Printer Heartbeat Information Disclosure (Heartbleed)

According to its self-reported build information, the firmware running on the remote HP OfficeJet printer is affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version. This error is related to handling TLS heartbeat extensions that could allow an...

[security bulletin] HPSBPI03031 rev.1 - HP Officejet Pro X Printers, Certain Officejet Pro Printers, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04272043 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04272043 Version: 1 HPSBPI03031 rev....

HPSBPI03031 rev.3 - HP Officejet Pro X Printers, Certain Officejet Pro Printers, Remote Disclosure of Information

Potential Security Impact Remote disclosure of information VULNERABILITY SUMMARY A potential security vulnerability has been identified in HP Officejet Pro X printers and in certain Officejet Pro printers running OpenSSL. This is the OpenSSL vulnerability known as "Heartbleed" CVE-2014-0160 which...

HP Officejet Pro 8500 crossite scripting

Crossite scripting in web interface...

[security bulletin] HPSBPI02945 rev.1 - HP Officejet Pro 8500 (A909) All-in-One Printer, Cross-Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04035829 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04035829 Version: 1 HPSBPI02945 rev....