medium5.0
CVE-2004-2439
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.
Impact
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Color Laserjet | Versions 4650, 5500, 5550 |
| Hp | Color Laserjet 4600 | All versions |
| Hp | Laserjet 2500 | All versions |
| Hp | Laserjet 3000 | All versions |
| Hp | Laserjet 3700 | All versions |
| Hp | Laserjet 4100 Mfp | All versions |
| Hp | Laserjet 4200 | All versions |
| Hp | Laserjet 4300 | All versions |
| Hp | Laserjet 9000 | All versions |
| Hp | Laserjet 9000 Mfp | All versions |
| Hp | Laserjet 9040 Mpf | All versions |
| Hp | Laserjet 9050 | All versions |
References
- NVD record
- CVE.org record
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085
- http://securitytracker.com/id?1011671
- http://www.securityfocus.com/bid/11297
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17634
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085
- http://securitytracker.com/id?1011671
- http://www.securityfocus.com/bid/11297
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17634