PT-2013-1788 · Hewlett Packard · Hp Color Laserjet Cp35Xx+18

Published 2013-04-29 · Updated 2013-12-31 · CVE-2012-5221

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP LaserJet versions prior to firmware 52.x HP LaserJet 4xxx versions prior to firmware 52.x HP LaserJet 5200 versions prior to firmware 52.x HP LaserJet 90xx versions prior to firmware 52.x HP LaserJet M30xx versions prior to firmware 52.x HP LaserJet M4345 versions prior to firmware 52.x HP LaserJet M50xx versions prior to firmware 52.x HP LaserJet M90xx versions prior to firmware 52.x HP LaserJet P3005 versions prior to firmware 52.x HP LaserJet P4xxx versions prior to firmware 52.x HP LaserJet Enterprise P3015 versions prior to firmware 52.x HP Color LaserJet 3xxx versions prior to firmware 52.x HP Color LaserJet 47xx versions prior to firmware 52.x HP Color LaserJet 5550 versions prior to firmware 52.x HP Color LaserJet 9500 versions prior to firmware 52.x HP Color LaserJet CM60xx versions prior to firmware 52.x HP Color LaserJet CP35xx versions prior to firmware 52.x HP Color LaserJet CP4005 versions prior to firmware 52.x HP Color LaserJet CP6015 versions prior to firmware 52.x HP Color LaserJet Enterprise CP4xxx versions prior to firmware 52.x HP 9250c Digital Sender versions prior to firmware 52.x

Description A directory traversal vulnerability exists in the PostScript Interpreter of various HP LaserJet models, allowing remote attackers to read arbitrary files via unknown vectors.

Recommendations For all affected HP LaserJet models, update the firmware to a version later than 52.x to resolve the issue. As a temporary workaround, consider restricting access to the PostScript Interpreter until a patch is available.

Fix

Related Identifiers

CVE-2012-5221

Affected Products

Hp 9250C Digital Sender

Hp Color Laserjet 3Xxx

Hp Color Laserjet 47Xx

Hp Color Laserjet 5550

Hp Color Laserjet 9500

Hp Color Laserjet Cm60Xx

Hp Color Laserjet Cp35Xx

Hp Color Laserjet Cp4005

Hp Color Laserjet Cp6015

Hp Color Laserjet Enterprise Cp4Xxx

Hp Laserjet

Hp Laserjet P4Xxx

Hp Laserjet 5200

Hp Laserjet 90Xx

Hp Laserjet Enterprise P3015

Hp Laserjet M30Xx

Hp Laserjet M4345

Hp Laserjet M50Xx

Hp Laserjet P3005

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-5221 · Security Note
• https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742 · Vendor Advisory
• http://verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023 · Note