CVE-2009-0941

The CVE-2009-0941 entry concerns the HP Embedded Web Server (EWS) used by HP LaserJet, Edgeline Printers, and Digital Senders. The vulnerability is due to the device exposing an interface with no management password by default, which can enable remote access. According to the NVD entry, this is a...

CVE-2009-0940

The CVE-2009-0940 entry describes multiple CSRF vulnerabilities in the HP Embedded Web Server (EWS) used by HP LaserJet printers, Edgeline printers, and Digital Senders. The vulnerabilities allow an attacker to hijack a user’s intranet connectivity to perform requests such as (1) printing documen...

CVE-2004-2439

CVE-2004-2439 concerns the remote upgrade capability in HP LaserJet 4200 and 4300 printers, described as not requiring a password and allowing remote firmware upgrades. The affected component is the printer firmware upgrade mechanism. Per HP guidance, a practical remediation is to disable remote ...