Login Request a demo
Unscored severity · published Dec 31, 2004
CVE-2004-2439
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware
–
CVSS
2.2%
EPSS
No
On KEV
Description
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Color Laserjet · HP
4650; 5500; 5550 · source: NVD
CL
Color Laserjet 4600 · HP
All versions, or not specified · source: NVD
L2
Laserjet 2500 · HP
All versions, or not specified · source: NVD
L3
Laserjet 3000 · HP
All versions, or not specified · source: NVD
L3
Laserjet 3700 · HP
All versions, or not specified · source: NVD
L4
Laserjet 4100 Mfp · HP
All versions, or not specified · source: NVD
L4
Laserjet 4200 · HP
All versions, or not specified · source: NVD
L4
Laserjet 4300 · HP
All versions, or not specified · source: NVD
L9
Laserjet 9000 · HP
All versions, or not specified · source: NVD
L9
Laserjet 9000 Mfp · HP
All versions, or not specified · source: NVD
L9
Laserjet 9040 Mpf · HP
All versions, or not specified · source: NVD
L9
Laserjet 9050 · HP
All versions, or not specified · source: NVD
Affected product
CL
Color Laserjet
HP
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2439
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2439
Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085
Vendor Advisory
http://securitytracker.com/id?1011671
www.securityfocus.com
http://www.securityfocus.com/bid/11297
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17634
More from Color Laserjet
–
CVE-2009-0941
The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers…
–
CVE-2009-0940
Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote…
–
CVE-2006-1654
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read…