PT-2009-3865 · Hewlett Packard · Hp Deskjet 6840

Published 2009-04-17 · Updated 2018-10-10 · CVE-2009-1333

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP Deskjet 6840 printer with firmware XF1M131A

Description A cross-site scripting (XSS) issue exists in the web interface of the HP Deskjet 6840 printer, specifically in refresh rate.htm. This allows remote attackers to inject arbitrary web script or HTML via the POST request body.

Recommendations For the HP Deskjet 6840 printer with firmware XF1M131A, consider disabling access to the refresh rate.htm page in the web interface until a fix is available. Restrict access to the web interface to minimize the risk of exploitation. Avoid using the web interface to prevent potential XSS attacks until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-1333

Affected Products

Hp Deskjet 6840

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2009-1333 · Security Note
• http://osvdb.org/53769 · Note
• http://secunia.com/advisories/34702 · Note
• http://securityfocus.com/archive/1/502620/100/0/threaded · Note
• http://securityfocus.com/bid/34480 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49850 · Note