CVE-2011-4161

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-4161
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449 Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449 Vendor Advisory
http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112
http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say
http://secunia.com/advisories/47063
http://www.kb.cert.org/vuls/id/717921 US Government Resource
http://www.securityfocus.com/bid/51324
http://www.securitytracker.com/id?1026357
https://lists.immunityinc.com/pipermail/dailydave/2011-November/000378.html
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449 Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449 Vendor Advisory
http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112
http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say
http://secunia.com/advisories/47063
http://www.kb.cert.org/vuls/id/717921 US Government Resource
http://www.securityfocus.com/bid/51324
http://www.securitytracker.com/id?1026357
https://lists.immunityinc.com/pipermail/dailydave/2011-November/000378.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:hp:color_laserjet_3000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_3800:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4700:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4730:mfp:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4730_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_5550:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_9500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cm3530:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cm4540:mfp:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cm4730:mfp:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cm6030:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cm6040:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cp3505:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cp3525:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cp4005:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cp5525:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cp6015:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_enterprise_cp4520:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_enterprise_cp4525:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_mfp_cm8060:-:-:edgeline:*:*:*:*:*
cpe:2.3:h:hp:digital_sender_9200c:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:digital_sender_9250c:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4240:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_5200:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_enterprise_500_color:m551:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_enterprise_600:m601:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_enterprise_600:m602:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_enterprise_600:m603:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_enterprise_m4555:mfp:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_enterprise_p3015:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m3035:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m5035:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m9040:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m9050:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p3005:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p4014:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p4015:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_p4515:*:*:*:*:*:*:*:*
History

21 Nov 2024, 01:31

Type Values Removed Values Added
References () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449 - Vendor Advisory () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449 - Vendor Advisory
References () http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112 - () http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112 -
References () http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say - () http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say -
References () http://secunia.com/advisories/47063 - () http://secunia.com/advisories/47063 -
References () http://www.kb.cert.org/vuls/id/717921 - US Government Resource () http://www.kb.cert.org/vuls/id/717921 - US Government Resource
References () http://www.securityfocus.com/bid/51324 - () http://www.securityfocus.com/bid/51324 -
References () http://www.securitytracker.com/id?1026357 - () http://www.securitytracker.com/id?1026357 -
References () https://lists.immunityinc.com/pipermail/dailydave/2011-November/000378.html - () https://lists.immunityinc.com/pipermail/dailydave/2011-November/000378.html -
Information

Published : 2011-12-01 21:55

Updated : 2024-11-21 01:31

NVD link : CVE-2011-4161

Mitre link : CVE-2011-4161

CVE.ORG link : CVE-2011-4161

JSON object : View

Products Affected

hp

  • digital_sender_9200c
  • laserjet_enterprise_p3015
  • color_laserjet_cm6040
  • color_mfp_cm8060
  • laserjet_4345_mfp
  • laserjet_4350
  • color_laserjet_cp3525
  • color_laserjet_4730
  • laserjet_m9040
  • laserjet_m9050
  • color_laserjet_9500
  • laserjet_4240
  • laserjet_enterprise_600
  • color_laserjet_4700
  • color_laserjet_4730_mfp
  • laserjet_enterprise_500_color
  • laserjet_m3035
  • color_laserjet_3800
  • color_laserjet_5550
  • laserjet_5200
  • laserjet_9050
  • color_laserjet_3000
  • color_laserjet_enterprise_cp4520
  • laserjet_m5035
  • color_laserjet_cp3505
  • laserjet_4250
  • color_laserjet_cp6015
  • color_laserjet_cm4730
  • laserjet_enterprise_m4555
  • laserjet_9040
  • laserjet_p4515
  • digital_sender_9250c
  • color_laserjet_enterprise_cp4525
  • laserjet_p3005
  • color_laserjet_cp4005
  • laserjet_p4014
  • laserjet_p4015
  • color_laserjet_cm4540
  • color_laserjet_cm6030
  • color_laserjet_cm3530
  • color_laserjet_cp5525
CWE
CWE-264

Permissions, Privileges, and Access Controls


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024