PT-2013-5226 · Hewlett Packard · Hp Color Laserjet Cm4540+8

Published 2013-10-04 · Updated 2019-10-09 · CVE-2013-4828

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP LaserJet M4555 versions (affected versions not specified) HP LaserJet M525 versions (affected versions not specified) HP LaserJet M725 versions (affected versions not specified) HP LaserJet flow MFP M525c versions (affected versions not specified) HP LaserJet Enterprise color flow MFP M575c versions (affected versions not specified) HP Color LaserJet CM4540 versions (affected versions not specified) HP Color LaserJet M575 versions (affected versions not specified) HP Color LaserJet M775 versions (affected versions not specified) HP ScanJet Enterprise 8500fn1 FutureSmart devices versions (affected versions not specified)

Description The issue allows remote attackers to obtain sensitive information via unspecified vectors due to improper encryption of PDF documents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2013-4828

Affected Products

Hp Color Laserjet Cm4540

Hp Color Laserjet M575

Hp Color Laserjet M775

Hp Laserjet Enterprise Color Flow Mfp M575C

Hp Laserjet M4555

Hp Laserjet M525

Hp Laserjet M725

Hp Laserjet Flow Mfp M525C

Hp Scanjet Enterprise 8500Fn1

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-4828 · Security Note
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014 · Vendor Advisory