CVE-2008-4419

CVE-2008-4419 concerns a directory traversal vulnerability in the HP-ChaiSOE/1.0 embedded JetDirect web server used by HP LaserJet printers and related devices. The flaw allows remote attackers to read arbitrary files via directory traversal in the URI. The vulnerability affects multiple products...

CVE-2011-4161

The CVE-2011-4161 issue affects multiple HP printers/receivers where the Remote Firmware Update (RFU) feature is enabled by default. An unauthenticated session on TCP port 9100 could upload hostile firmware, enabling remote code execution and potentially impacting confidentiality, integrity, and ...

CVE-2012-5221

CVE-2012-5221 is a directory-traversal vulnerability in the PostScript Interpreter used by a broad set of HP LaserJet printers and related devices. According to HP’s security bulletin and related sources, remote attackers could read arbitrary files via model-dependent firmware pathways, with affe...

CVE-2009-0941

The CVE-2009-0941 entry concerns the HP Embedded Web Server (EWS) used by HP LaserJet, Edgeline Printers, and Digital Senders. The vulnerability is due to the device exposing an interface with no management password by default, which can enable remote access. According to the NVD entry, this is a...

CVE-2009-0940

The CVE-2009-0940 entry describes multiple CSRF vulnerabilities in the HP Embedded Web Server (EWS) used by HP LaserJet printers, Edgeline printers, and Digital Senders. The vulnerabilities allow an attacker to hijack a user’s intranet connectivity to perform requests such as (1) printing documen...

CVE-2004-2439

CVE-2004-2439 concerns the remote upgrade capability in HP LaserJet 4200 and 4300 printers, described as not requiring a password and allowing remote firmware upgrades. The affected component is the printer firmware upgrade mechanism. Per HP guidance, a practical remediation is to disable remote ...