PT-2011-3194 · Hewlett Packard · Hp Photosmart Premium C310+5

Aaron Sigel · Publicado 2011-04-15 · Atualizado 2017-08-17 · CVE-2011-1533

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP Photosmart D110 and B110 versions (affected versions not specified) HP Photosmart Plus B210 version (affected versions not specified) HP Photosmart Premium C310, Fax All-in-One, and C510 versions (affected versions not specified) HP ENVY 100 D410 version (affected versions not specified)

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of the affected devices.

Recommendations For HP Photosmart D110 and B110, update to a version that addresses the XSS issue. For HP Photosmart Plus B210, update to a version that addresses the XSS issue. For HP Photosmart Premium C310, Fax All-in-One, and C510, update to a version that addresses the XSS issue. For HP ENVY 100 D410, update to a version that addresses the XSS issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-1533

Produtos afetados

Hp Envy 100 D410

Hp Photosmart B110

Hp Photosmart Plus B210

Hp Photosmart Premium C310

Hp Photosmart Premium C510

Hp Photosmart Premium Fax All-In-One

Referências · 8

• http://secunia.com/advisories/44143 · Nota
• http://securityfocus.com/bid/47319 · Nota
• http://marc.info/?l=bugtraq&m=130262523515904&w=2 · Aviso do Fabricante
• http://securitytracker.com/id?1025315 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1533 · Nota de Segurança
• http://securityreason.com/securityalert/8203 · Nota
• http://vupen.com/english/advisories/2011/0931 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66683 · Nota