PT-1997-1178 · Hewlett Packard · Jetdirect+1

Published 1997-10-04 · Updated 2017-12-19 · CVE-1999-1061

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Laserjet printers with JetDirect cards (affected versions not specified)

Description The issue concerns HP Laserjet printers with JetDirect cards that are configured with TCP/IP. These printers can be set up without a password, allowing remote attackers to connect to the printer. Once connected, attackers can modify the printer's IP address or disable logging.

Recommendations For HP Laserjet printers with JetDirect cards, consider configuring a password to prevent unauthorized access. As a temporary workaround, restrict remote access to the printer until a more secure configuration can be implemented.

Fix

Related Identifiers

CVE-1999-1061

Affected Products

Hp Laserjet

Jetdirect

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1061 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1876 · Note
• http://marc.info/?l=bugtraq&m=87602248518480&w=2 · Note