CVE-2011-4161 The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 9...
HighCVSS 10.0
EPSS 14.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc color laserjet 3000 | All versions | No fix listed |
| HP Inc color laserjet 3800 | All versions | No fix listed |
| HP Inc color laserjet 4700 | All versions | No fix listed |
| HP Inc color laserjet 4730 | = mfp | No fix listed |
| HP Inc color laserjet 4730 mfp | All versions | No fix listed |
| HP Inc color laserjet 5550 | All versions | No fix listed |
| HP Inc color laserjet 9500 | All versions | No fix listed |
| HP Inc color laserjet cm3530 | All versions | No fix listed |
| HP Inc color laserjet cm4540 | = mfp | No fix listed |
| HP Inc color laserjet cm4730 | = mfp | No fix listed |
| HP Inc color laserjet cm6030 | All versions | No fix listed |
| HP Inc color laserjet cm6040 | All versions | No fix listed |
| HP Inc color laserjet cp3505 | All versions | No fix listed |
| HP Inc color laserjet cp3525 | All versions | No fix listed |
| HP Inc color laserjet cp4005 | All versions | No fix listed |
| HP Inc color laserjet cp5525 | All versions | No fix listed |
| HP Inc color laserjet cp6015 | All versions | No fix listed |
| HP Inc color laserjet enterprise cp4520 | All versions | No fix listed |
| HP Inc color laserjet enterprise cp4525 | All versions | No fix listed |
| HP Inc color mfp cm8060 | All versions | No fix listed |
| HP Inc digital sender 9200c | All versions | No fix listed |
| HP Inc digital sender 9250c | All versions | No fix listed |
| HP Inc laserjet 4240 | All versions | No fix listed |
| HP Inc laserjet 4250 | All versions | No fix listed |
| HP Inc laserjet 4345 mfp | All versions | No fix listed |
Show 18 more
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc laserjet 4350 | All versions | No fix listed |
| HP Inc laserjet 5200 | All versions | No fix listed |
| HP Inc laserjet 9040 | All versions | No fix listed |
| HP Inc laserjet 9050 | All versions | No fix listed |
| HP Inc laserjet enterprise 500 color | = m551 | No fix listed |
| HP Inc laserjet enterprise 600 | = m601 | No fix listed |
| HP Inc laserjet enterprise 600 | = m602 | No fix listed |
| HP Inc laserjet enterprise 600 | = m603 | No fix listed |
| HP Inc laserjet enterprise m4555 | = mfp | No fix listed |
| HP Inc laserjet enterprise p3015 | All versions | No fix listed |
| HP Inc laserjet m3035 | All versions | No fix listed |
| HP Inc laserjet m5035 | All versions | No fix listed |
| HP Inc laserjet m9040 | All versions | No fix listed |
| HP Inc laserjet m9050 | All versions | No fix listed |
| HP Inc laserjet p3005 | All versions | No fix listed |
| HP Inc laserjet p4014 | All versions | No fix listed |
| HP Inc laserjet p4015 | All versions | No fix listed |
| HP Inc laserjet p4515 | All versions | No fix listed |
References
- HPSBPI02728 vendor-advisory
- isc.sans.org
- redtape.msnbc.msn.com
- 47063 third-party-advisory
- VU#717921 third-party-advisory us-government-resource
- 51324 vdb-entry
- 1026357 vdb-entry
- [dailydave] 20111130 The Vampire Diaries mailing-list