PT-2012-1956

CVE-2011-4785

·

Published

2012-01-10

·

Updated

2017-08-29

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions HP LaserJet P3015 printer with firmware prior to 07.080.3 HP LaserJet 4650 printer with firmware 07.006.0 HP LaserJet 2430 printer with firmware 08.113.0 I35128
Description A directory traversal issue in the HP-ChaiSOE/1.0 web server allows remote attackers to read arbitrary files via unspecified vectors.
Recommendations For HP LaserJet P3015 printer, update the firmware to version 07.080.3 or later. For HP LaserJet 4650 printer, consider disabling the web server functionality until a firmware update is available. For HP LaserJet 2430 printer, restrict access to the web server interface until a firmware update is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2011-4785
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com