PT-2012-1956 · Hewlett Packard · Hp Laserjet P3015+3

Published 2012-01-10 · Updated 2017-08-29 · CVE-2011-4785

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP LaserJet P3015 printer with firmware prior to 07.080.3 HP LaserJet 4650 printer with firmware 07.006.0 HP LaserJet 2430 printer with firmware 08.113.0 I35128

Description A directory traversal issue in the HP-ChaiSOE/1.0 web server allows remote attackers to read arbitrary files via unspecified vectors.

Recommendations For HP LaserJet P3015 printer, update the firmware to version 07.080.3 or later. For HP LaserJet 4650 printer, consider disabling the web server functionality until a firmware update is available. For HP LaserJet 2430 printer, restrict access to the web server interface until a firmware update is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-4785

Affected Products

Hp Laserjet 2430

Hp Laserjet 4650

Hp Laserjet P3015

Hp-Chaisoe

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2011-4785 · Security Note
• http://securityfocus.com/archive/1/521160 · Vendor Advisory
• http://secunia.com/advisories/47457 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0116.html · Note
• http://securityfocus.com/bid/51329 · Note
• http://securityfocus.com/archive/1/521165 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72227 · Note
• http://osvdb.org/78224 · Note