Unscored severity · published Apr 29, 2013
CVE-2012-5221
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise…
–
CVSS
5%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.0% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Color Laserjet 3000 · HP
q7534a · source: NVD
CL
Color Laserjet 3800 · HP
q5981a · source: NVD
CL
Color Laserjet 4700 · HP
q7492a · source: NVD
CL
Color Laserjet 4730 Mfp · HP
cb480a · source: NVD
CL
Color Laserjet 5550 · HP
q3714a · source: NVD
CL
Color Laserjet 9500 Mfp · HP
c8549a · source: NVD
CL
Color Laserjet Cm6030 Mfp · HP
ce664a · source: NVD
CL
Color Laserjet Cm6040 Mfp · HP
q3939a · source: NVD
CL
Color Laserjet Cp3505 · HP
cb442a · source: NVD
CL
Color Laserjet Cp3525 · HP
cc469a · source: NVD
CL
Color Laserjet Cp4005 · HP
cb503a · source: NVD
CL
Color Laserjet Cp6015 · HP
q3932a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5221
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5221
www.verisigninc.com
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023
Vendor Advisory
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742
More from Color Laserjet 3000
–
CVE-2011-4161
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c;…