PT-2010-3231 · Hewlett Packard · Hp Multifunction Peripheral (Mfp) Digital Sending

Published 2010-05-14 · Updated 2017-08-17 · CVE-2010-1558

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP Multifunction Peripheral (MFP) Digital Sending Software versions prior to 4.18.3

Description The issue allows local users to bypass intended restrictions on the MFP "Send to e-mail" feature and obtain sensitive information. The exact vectors used for exploitation are not specified.

Recommendations For versions prior to 4.18.3, update to version 4.18.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "Send to e-mail" feature until the update is applied.

Fix

Related Identifiers

CVE-2010-1558

Affected Products

Hp Multifunction Peripheral (Mfp) Digital Sending

References · 5

• http://marc.info/?l=bugtraq&m=127376308013422&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1558 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58618 · Note
• http://osvdb.org/64661 · Note
• http://securityfocus.com/bid/40147 · Note