The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.
2004-12-31T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 5.0 (MEDIUM)
AV:N/AC:L/Au:N/C:N/I:P/A:N
10.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Hardware | hp | color_laserjet | 4650 | Yes |
Hardware | hp | color_laserjet | 5500 | Yes |
Hardware | hp | color_laserjet | 5550 | Yes |
Hardware | hp | color_laserjet_4600 | * | Yes |
Hardware | hp | laserjet_2500 | * | Yes |
Hardware | hp | laserjet_3000 | * | Yes |
Hardware | hp | laserjet_3700 | * | Yes |
Hardware | hp | laserjet_4100_mfp | * | Yes |
Hardware | hp | laserjet_4200 | * | Yes |
Hardware | hp | laserjet_4300 | * | Yes |
Hardware | hp | laserjet_9000 | * | Yes |
Hardware | hp | laserjet_9000_mfp | * | Yes |
Hardware | hp | laserjet_9040_mpf | * | Yes |
Hardware | hp | laserjet_9050 | * | Yes |
Hardware | hp | laserjet_9050_mpf | * | Yes |
Hardware | hp | laserjet_9055 | * | Yes |
Hardware | hp | laserjet_9065 | * | Yes |
Hardware | hp | laserjet_9500 | * | Yes |
Hardware | hp | laserjet_9500_mpf | * | Yes |