CVE-2011-4161
01.12.2011, 21:55
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.Enginsight
| Vendor | Product | Version |
|---|---|---|
| hp | color_laserjet_3000 | * |
| hp | color_laserjet_3800 | * |
| hp | color_laserjet_4700 | * |
| hp | color_laserjet_4730_mfp | * |
| hp | color_laserjet_5550 | * |
| hp | color_laserjet_9500 | * |
| hp | color_laserjet_cm3530 | * |
| hp | color_laserjet_cm6030 | * |
| hp | color_laserjet_cm6040 | * |
| hp | color_laserjet_cp3505 | * |
| hp | color_laserjet_cp3525 | * |
| hp | color_laserjet_cp4005 | * |
| hp | color_laserjet_cp5525 | * |
| hp | color_laserjet_cp6015 | * |
| hp | color_laserjet_enterprise_cp4520 | * |
| hp | color_laserjet_enterprise_cp4525 | * |
| hp | color_mfp_cm8060 | - |
| hp | digital_sender_9200c | * |
| hp | digital_sender_9250c | * |
| hp | laserjet_4240 | * |
| hp | laserjet_4250 | * |
| hp | laserjet_4345_mfp | * |
| hp | laserjet_4350 | * |
| hp | laserjet_5200 | * |
| hp | laserjet_9040 | * |
| hp | laserjet_9050 | * |
| hp | laserjet_enterprise_p3015 | * |
| hp | laserjet_m3035 | * |
| hp | laserjet_m5035 | * |
| hp | laserjet_m9040 | * |
| hp | laserjet_m9050 | * |
| hp | laserjet_p3005 | * |
| hp | laserjet_p4014 | * |
| hp | laserjet_p4015 | * |
| hp | laserjet_p4515 | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References