CVE-2004-1856 devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.
MediumCVSS 5.0
EPSS 29.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc web jetadmin | = 7.5.2546 | No fix listed |
References
- 20040324 HP Web JetAdmin vulnerabilities. mailing-list
- sh0dan.org exploit vendor-advisory
- SSRT4700 vendor-advisory
- 9971 exploit vdb-entry vendor-advisory
- hp-jetadmin-file-upload(15605) vdb-entry