RSS   Vulnerabilities for 'Laserjet 5/m/n'   RSS

2009-03-18
 
CVE-2009-0941

CWE-264
 
 
The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.

 
 
CVE-2009-0940

CWE-352
 
 
Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.

 

 >>> Vendor: HP 2379 Products
Hp-ux
Dtmail
VVOS
Desms
Mpe ix
Tru64
Openmail
Sendmail
Visualize conference ftp
Secure web console
Jetdirect
Apollo domain os
9000
Jetadmin
Aserver
Openview omniback ii
Openview network node manager
Support tools manager
Omniback ii
Virtualvault
MPE
Process resource manager
Cifs-9000 server
Secure os
Java jre-jdk
Advancestack 10base-t switching hub j3200a
Advancestack 10base-t switching hub j3201a
Advancestack 10base-t switching hub j3202a
Advancestack 10base-t switching hub j3203a
Advancestack 10base-t switching hub j3204a
Advancestack 10base-t switching hub j3205a
Advancestack 10base-t switching hub j3210a
Procurve switch 4000m
Photosmart print driver
Trucluster server
Instant support
Webes service tools
Alphaserver sc
Openview emanate snmp agent
JFS
Hp-ux series 700
Hp-ux series 800
Ldap-ux integration
Chaivm
Application server
Praesidium webproxy
Advanced server 9000
Secure web server for tru64
SIS
Instant toptools
Nonstop seeview server gateway
Openview
Bastille
Insight management suite
Insight manager
Remote diagnostics enabling agent
WBEM
Aaa server
Apache-based web server
Webproxy
Integrated lights out
Openview select access
Ignite-ux
Sockd
Java sdk-rte
Storageworks command view
Workload manager
Ssl http server
Web jetadmin
Color laserjet
Color laserjet 4600
Laserjet 2500
Laserjet 3000
Laserjet 3700
Laserjet 4100 mfp
Laserjet 4200
Laserjet 4300
Laserjet 9000
Laserjet 9000 mfp
Laserjet 9040 mpf
Laserjet 9050
Laserjet 9050 mpf
Laserjet 9055
Laserjet 9065
Laserjet 9500
Laserjet 9500 mpf
Carrier grade server cc2300
Carrier grade server cc3300
Carrier grade server cc3310
Openvms
Openview radia management portal
Openview event correlation services
Radia client
Version control repository manager
Proliant dl585
Laserjet 2430
Jetdirect 635n
Systems insight manager
Oracle for openview
Http server
See all Products for Vendor HP

Copyright 2024, cxsecurity.com

 

Back to Top