CVE-2011-4161

Currently unrated

Key Information:

Vendor
HP
Status
Color Laserjet Enterprise Cp4520
Laserjet M5035
Laserjet Enterprise 600
Laserjet 4250
Vendor
CVE Published:
1 December 2011

Summary

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.

References

http://www.kb.cert.org/vuls/id/717921
third-party-advisoryx_refsource_CERT-VN
http://h20000.www2.hp.com/bizsupport/TechSupport/Document...
vendor-advisoryx_refsource_HP
http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and...
x_refsource_MISC

EPSS Score

41% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.