CVE-2012-5221

Name of the Vulnerable Software and Affected Versions HP LaserJet versions prior to firmware 52.x HP LaserJet 4xxx versions prior to firmware 52.x HP LaserJet 5200 versions prior to firmware 52.x HP LaserJet 90xx versions prior to firmware 52.x HP LaserJet M30xx versions prior to firmware 52.x HP LaserJet M4345 versions prior to firmware 52.x HP LaserJet M50xx versions prior to firmware 52.x HP LaserJet M90xx versions prior to firmware 52.x HP LaserJet P3005 versions prior to firmware 52.x HP LaserJet P4xxx versions prior to firmware 52.x HP LaserJet Enterprise P3015 versions prior to firmware 52.x HP Color LaserJet 3xxx versions prior to firmware 52.x HP Color LaserJet 47xx versions prior to firmware 52.x HP Color LaserJet 5550 versions prior to firmware 52.x HP Color LaserJet 9500 versions prior to firmware 52.x HP Color LaserJet CM60xx versions prior to firmware 52.x HP Color LaserJet CP35xx versions prior to firmware 52.x HP Color LaserJet CP4005 versions prior to firmware 52.x HP Color LaserJet CP6015 versions prior to firmware 52.x HP Color LaserJet Enterprise CP4xxx versions prior to firmware 52.x HP 9250c Digital Sender versions prior to firmware 52.x

Description A directory traversal vulnerability exists in the PostScript Interpreter of various HP LaserJet models, allowing remote attackers to read arbitrary files via unknown vectors.

Recommendations For all affected HP LaserJet models, update the firmware to a version later than 52.x to resolve the issue. As a temporary workaround, consider restricting access to the PostScript Interpreter until a patch is available.