PT-2012-1956 · Hewlett Packard · Hp Laserjet P3015+3

Publicado 2012-01-10 · Atualizado 2017-08-29 · CVE-2011-4785

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP LaserJet P3015 printer with firmware prior to 07.080.3 HP LaserJet 4650 printer with firmware 07.006.0 HP LaserJet 2430 printer with firmware 08.113.0 I35128

Description A directory traversal issue in the HP-ChaiSOE/1.0 web server allows remote attackers to read arbitrary files via unspecified vectors.

Recommendations For HP LaserJet P3015 printer, update the firmware to version 07.080.3 or later. For HP LaserJet 4650 printer, consider disabling the web server functionality until a firmware update is available. For HP LaserJet 2430 printer, restrict access to the web server interface until a firmware update is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-4785

Produtos afetados

Hp Laserjet 2430

Hp Laserjet 4650

Hp Laserjet P3015

Hp-Chaisoe

Referências · 8

• http://secunia.com/advisories/47457 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0116.html · Nota
• http://securityfocus.com/bid/51329 · Nota
• http://securityfocus.com/archive/1/521165 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72227 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4785 · Nota de Segurança
• http://osvdb.org/78224 · Nota
• http://securityfocus.com/archive/1/521160 · Aviso do Fabricante