NetSight
IP …
medium5.0

CVE-2012-5221

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; Las…

Impact

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.

Affected products

VendorProductAffected versions
HpColor Laserjet 3000
Version q7534a
HpColor Laserjet 3800
Version q5981a
HpColor Laserjet 4700
Version q7492a
HpColor Laserjet 4730 Mfp
Version cb480a
HpColor Laserjet 5550
Version q3714a
HpColor Laserjet 9500 Mfp
Version c8549a
HpColor Laserjet Cm6030 Mfp
Version ce664a
HpColor Laserjet Cm6040 Mfp
Version q3939a
HpColor Laserjet Cp3505
Version cb442a
HpColor Laserjet Cp3525
Version cc469a
HpColor Laserjet Cp4005
Version cb503a
HpColor Laserjet Cp6015
Version q3932a

References