Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color LaserJet 4730mfp before firmware 46.200.9; LaserJet 2410, LaserJet 2420, and LaserJet 2430 before firmware 20080819 SPCL112A; LaserJet 4250 and LaserJet 4350 before firmware 20080819 SPCL015A; and LaserJet 9040 and LaserJet 9050 before firmware 20080819 SPCL110A allows remote attackers to read arbitrary files via directory traversal sequences in the URI.
CVE-2008-4419 is a security vulnerability that . Impacting 13 products from hp, from hp, from hp and 10 others, organizations running these solutions should prioritize assessment and patching.
Originally identified in 2009, this vulnerability predates many modern security frameworks and practices. The vulnerability landscape of that era was characterized by different threat models and less mature defense mechanisms compared to contemporary standards.
2009-02-05T00:30:00.203
2025-04-09T00:30:58.490
Deferred
CVSSv2: 7.8 (HIGH)
AV:N/AC:L/Au:N/C:C/I:N/A:N
10.0
6.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Hardware | hp | 9200c_digital_sender | ≤ 20081211_09.131.1 | Yes |
| Hardware | hp | color_laserjet_4370mfp | ≤ 20081211_46.211.2 | Yes |
| Hardware | hp | color_laserjet_9500mfp | ≤ 20070719_05.011.2 | Yes |
| Hardware | hp | laserjet_2410 | ≤ 20070410_08.112.3 | Yes |
| Hardware | hp | laserjet_2420 | ≤ 20070410_08.112.3 | Yes |
| Hardware | hp | laserjet_2430 | ≤ 20070410_08.112.3 | Yes |
| Hardware | hp | laserjet_4250 | ≤ 20080319_08.015.0 | Yes |
| Hardware | hp | laserjet_4345mfp | ≤ 20081211_09.131.1 | Yes |
| Hardware | hp | laserjet_4350 | ≤ 20080319_08.015.0 | Yes |
| Hardware | hp | laserjet_9040 | ≤ 20080204_08.110.0 | Yes |
| Hardware | hp | laserjet_9040mfp | ≤ 20080204_08.110.0 | Yes |
| Hardware | hp | laserjet_9050 | ≤ 20080204_08.110.0 | Yes |
| Hardware | hp | laserjet_9050mfp | ≤ 20080204_08.110.0 | Yes |
SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For hp's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.