PT-2011-3194 · Hewlett Packard · Hp Photosmart Premium C310+5

Aaron Sigel · Published 2011-04-15 · Updated 2017-08-17 · CVE-2011-1533

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP Photosmart D110 and B110 versions (affected versions not specified) HP Photosmart Plus B210 version (affected versions not specified) HP Photosmart Premium C310, Fax All-in-One, and C510 versions (affected versions not specified) HP ENVY 100 D410 version (affected versions not specified)

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of the affected devices.

Recommendations For HP Photosmart D110 and B110, update to a version that addresses the XSS issue. For HP Photosmart Plus B210, update to a version that addresses the XSS issue. For HP Photosmart Premium C310, Fax All-in-One, and C510, update to a version that addresses the XSS issue. For HP ENVY 100 D410, update to a version that addresses the XSS issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-1533

Affected Products

Hp Envy 100 D410

Hp Photosmart B110

Hp Photosmart Plus B210

Hp Photosmart Premium C310

Hp Photosmart Premium C510

Hp Photosmart Premium Fax All-In-One

References · 8

• http://marc.info/?l=bugtraq&m=130262523515904&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1533 · Security Note
• http://secunia.com/advisories/44143 · Note
• http://securityfocus.com/bid/47319 · Note
• http://securitytracker.com/id?1025315 · Note
• http://securityreason.com/securityalert/8203 · Note
• http://vupen.com/english/advisories/2011/0931 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66683 · Note