Unscored severity · published Mar 18, 2009
CVE-2009-0941
The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers…
–
CVSS
3%
EPSS
No
On KEV
Description
The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
8D
8100c Digital Sender · HP
All versions, or not specified · source: NVD
9D
9100c Digital Sender · HP
All versions, or not specified · source: NVD
9D
9200c Digital Sender · HP
All versions, or not specified · source: NVD
9D
9250c Digital Sender · HP
All versions, or not specified · source: NVD
CL
Color Laserjet · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 1500 · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 2500 · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 2500l · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 2500lse · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 2500n · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 2500tn · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 2605dtn · HP
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0941
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0941
Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566
www.louhinetworks.fi
http://www.louhinetworks.fi/advisory/HP_20090317.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/501884/100/0/threaded
www.vupen.com
http://www.vupen.com/english/advisories/2009/0754
More from 8100c Digital Sender
–
CVE-2009-0940
Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote…