PT-2009-3865 · Hewlett Packard · Hp Deskjet 6840

Publicado 2009-04-17 · Atualizado 2018-10-10 · CVE-2009-1333

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP Deskjet 6840 printer with firmware XF1M131A

Description A cross-site scripting (XSS) issue exists in the web interface of the HP Deskjet 6840 printer, specifically in refresh rate.htm. This allows remote attackers to inject arbitrary web script or HTML via the POST request body.

Recommendations For the HP Deskjet 6840 printer with firmware XF1M131A, consider disabling access to the refresh rate.htm page in the web interface until a fix is available. Restrict access to the web interface to minimize the risk of exploitation. Avoid using the web interface to prevent potential XSS attacks until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-1333

Produtos afetados

Hp Deskjet 6840

Referências · 6

• http://osvdb.org/53769 · Nota
• http://secunia.com/advisories/34702 · Nota
• http://securityfocus.com/archive/1/502620/100/0/threaded · Nota
• http://securityfocus.com/bid/34480 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49850 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1333 · Nota de Segurança