Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-0940

Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.

Security Impact Summary

CVE-2009-0940 is a security vulnerability that . Impacting 154 products from hp, from hp, from hp and 151 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Originally identified in 2009, this vulnerability predates many modern security frameworks and practices. The vulnerability landscape of that era was characterized by different threat models and less mature defense mechanisms compared to contemporary standards.

Published

2009-03-18T21:00:00.377

Last Modified

2026-04-23T00:35:47.467

Status

Modified

Source

[email protected]

Severity

CVSSv2: 5.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

4.9

Impact Score

6.4

Weaknesses

Type: Primary
CWE-352

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Hardware	hp	8100c_digital_sender	-	Yes
Hardware	hp	9100c_digital_sender	-	Yes
Hardware	hp	9200c_digital_sender	-	Yes
Hardware	hp	9250c_digital_sender	-	Yes
Hardware	hp	color_laserjet	*	Yes
Hardware	hp	color_laserjet_1500	*	Yes
Hardware	hp	color_laserjet_2500	*	Yes
Hardware	hp	color_laserjet_2500l	*	Yes
Hardware	hp	color_laserjet_2500lse	*	Yes
Hardware	hp	color_laserjet_2500n	*	Yes
Hardware	hp	color_laserjet_2500tn	*	Yes
Hardware	hp	color_laserjet_2605dtn	*	Yes
Hardware	hp	color_laserjet_4370mfp	20081211_46.211.2	Yes
Hardware	hp	color_laserjet_4600	*	Yes
Hardware	hp	color_laserjet_4600dn	*	Yes
Hardware	hp	color_laserjet_4600dtn	*	Yes
Hardware	hp	color_laserjet_4600hdn	*	Yes
Hardware	hp	color_laserjet_4650	*	Yes
Hardware	hp	color_laserjet_4700	*	Yes
Hardware	hp	color_laserjet_4730_mfp	*	Yes
Hardware	hp	color_laserjet_5500	*	Yes
Hardware	hp	color_laserjet_5550	*	Yes
Hardware	hp	color_laserjet_8500	*	Yes
Hardware	hp	color_laserjet_8550	*	Yes
Hardware	hp	color_laserjet_9500	*	Yes
Hardware	hp	color_laserjet_9500_mfp	*	Yes
Hardware	hp	color_laserjet_9500mfp	20070719_05.011.2	Yes
Hardware	hp	color_mfp_cm8050	-	Yes
Hardware	hp	color_mfp_cm8060	-	Yes
Hardware	hp	digital_senders	*	Yes
Hardware	hp	edgeline_printers	*	Yes
Hardware	hp	laserjet_1000	*	Yes
Hardware	hp	laserjet_1005	*	Yes
Hardware	hp	laserjet_1010	*	Yes
Hardware	hp	laserjet_1012	*	Yes
Hardware	hp	laserjet_1015	*	Yes
Hardware	hp	laserjet_1018	*	Yes
Hardware	hp	laserjet_1018s	*	Yes
Hardware	hp	laserjet_1020	*	Yes
Hardware	hp	laserjet_1020_plus	*	Yes
Hardware	hp	laserjet_1022	*	Yes
Hardware	hp	laserjet_1022n	*	Yes
Hardware	hp	laserjet_1022nw	*	Yes
Hardware	hp	laserjet_1100	*	Yes
Hardware	hp	laserjet_1150	*	Yes
Hardware	hp	laserjet_1160	*	Yes
Hardware	hp	laserjet_1200	*	Yes
Hardware	hp	laserjet_1300	*	Yes
Hardware	hp	laserjet_1320	*	Yes
Hardware	hp	laserjet_2	*	Yes
Hardware	hp	laserjet_2000	*	Yes
Hardware	hp	laserjet_2100	*	Yes
Hardware	hp	laserjet_2200	*	Yes
Hardware	hp	laserjet_2200dtn	*	Yes
Hardware	hp	laserjet_2300	*	Yes
Hardware	hp	laserjet_2300dn	*	Yes
Hardware	hp	laserjet_2400	*	Yes
Hardware	hp	laserjet_2410	20070410_08.112.3	Yes
Hardware	hp	laserjet_2420	20070410_08.112.3	Yes
Hardware	hp	laserjet_2430	*	Yes
Hardware	hp	laserjet_2430	20070410_08.112.3	Yes
Hardware	hp	laserjet_2500	*	Yes
Hardware	hp	laserjet_2500c	*	Yes
Hardware	hp	laserjet_2600c	*	Yes
Hardware	hp	laserjet_2600n	*	Yes
Hardware	hp	laserjet_3000	*	Yes
Hardware	hp	laserjet_3700	*	Yes
Hardware	hp	laserjet_4	*	Yes
Hardware	hp	laserjet_4\/4m	*	Yes
Hardware	hp	laserjet_4_plus\/m_plus	*	Yes
Hardware	hp	laserjet_4000	*	Yes
Hardware	hp	laserjet_4000n	*	Yes
Hardware	hp	laserjet_4050	*	Yes
Hardware	hp	laserjet_4100	*	Yes
Hardware	hp	laserjet_4100_mfp	*	Yes
Hardware	hp	laserjet_4100mfp	*	Yes
Hardware	hp	laserjet_4200	*	Yes
Hardware	hp	laserjet_4200dtn	*	Yes
Hardware	hp	laserjet_4200ln	*	Yes
Hardware	hp	laserjet_4240	*	Yes
Hardware	hp	laserjet_4240n	*	Yes
Hardware	hp	laserjet_4250	*	Yes
Hardware	hp	laserjet_4250	20080319_08.015.0	Yes
Hardware	hp	laserjet_4300	*	Yes
Hardware	hp	laserjet_4345_mfp	*	Yes
Hardware	hp	laserjet_4345mfp	20081211_09.131.1	Yes
Hardware	hp	laserjet_4350	*	Yes
Hardware	hp	laserjet_4350	20080319_08.015.0	Yes
Hardware	hp	laserjet_4350dtn	*	Yes
Hardware	hp	laserjet_4650dn	*	Yes
Hardware	hp	laserjet_4l\/ml	*	Yes
Hardware	hp	laserjet_4m_plus	*	Yes
Hardware	hp	laserjet_4p\/mp	*	Yes
Hardware	hp	laserjet_4si	*	Yes
Hardware	hp	laserjet_4v\/mv	*	Yes
Hardware	hp	laserjet_5	*	Yes
Hardware	hp	laserjet_5\/m\/n	*	Yes
Hardware	hp	laserjet_500_plus	*	Yes
Hardware	hp	laserjet_5000	*	Yes
Hardware	hp	laserjet_5000	r.25.15	Yes
Hardware	hp	laserjet_5000	r.25.47	Yes
Hardware	hp	laserjet_5100	*	Yes
Hardware	hp	laserjet_5100	v.29.12	Yes
Hardware	hp	laserjet_5100dtn	*	Yes
Hardware	hp	laserjet_5200	*	Yes
Hardware	hp	laserjet_5l	*	Yes
Hardware	hp	laserjet_5m	*	Yes
Hardware	hp	laserjet_5p\/mp	*	Yes
Hardware	hp	laserjet_5si	*	Yes
Hardware	hp	laserjet_8000	*	Yes
Hardware	hp	laserjet_8100	*	Yes
Hardware	hp	laserjet_8150	*	Yes
Hardware	hp	laserjet_8150dn	*	Yes
Hardware	hp	laserjet_9000	*	Yes
Hardware	hp	laserjet_9000_mfp	*	Yes
Hardware	hp	laserjet_9000mfp	*	Yes
Hardware	hp	laserjet_9040	*	Yes
Hardware	hp	laserjet_9040	20080204_08.110.0	Yes
Hardware	hp	laserjet_9040mfp	*	Yes
Hardware	hp	laserjet_9040mfp	20080204_08.110.0	Yes
Hardware	hp	laserjet_9050	*	Yes
Hardware	hp	laserjet_9050	20080204_08.110.0	Yes
Hardware	hp	laserjet_9050_mfp	*	Yes
Hardware	hp	laserjet_9050mfp	*	Yes
Hardware	hp	laserjet_9050mfp	20080204_08.110.0	Yes
Hardware	hp	laserjet_9055	*	Yes
Hardware	hp	laserjet_9065	*	Yes
Hardware	hp	laserjet_9500	*	Yes
Hardware	hp	laserjet_9500mfp	*	Yes
Hardware	hp	laserjet_ii	*	Yes
Hardware	hp	laserjet_iid	*	Yes
Hardware	hp	laserjet_iii	*	Yes
Hardware	hp	laserjet_iiid	*	Yes
Hardware	hp	laserjet_iiip	*	Yes
Hardware	hp	laserjet_iiisi	*	Yes
Hardware	hp	laserjet_iip	*	Yes
Hardware	hp	laserjet_iip_plus	*	Yes
Hardware	hp	laserjet_m1522n_mfp	*	Yes
Hardware	hp	laserjet_m3027_mfp	*	Yes
Hardware	hp	laserjet_m3035_mfp	*	Yes
Hardware	hp	laserjet_m4345_mfp	*	Yes
Hardware	hp	laserjet_m5025_mfp	*	Yes
Hardware	hp	laserjet_m5035_mfp	*	Yes
Hardware	hp	laserjet_p1000	*	Yes
Hardware	hp	laserjet_p1005	*	Yes
Hardware	hp	laserjet_p1006	*	Yes
Hardware	hp	laserjet_p1007	*	Yes
Hardware	hp	laserjet_p1008	*	Yes
Hardware	hp	laserjet_p1009	*	Yes
Hardware	hp	laserjet_p1500	*	Yes
Hardware	hp	laserjet_p1505	*	Yes
Hardware	hp	laserjet_p1505n	*	Yes
Hardware	hp	laserjet_p2000	*	Yes
Hardware	hp	laserjet_p2010	*	Yes
Hardware	hp	laserjet_p2015	*	Yes
Hardware	hp	laserjet_p2030	*	Yes
Hardware	hp	laserjet_p2050	*	Yes
Hardware	hp	laserjet_p3000	*	Yes
Hardware	hp	laserjet_p3005	*	Yes
Hardware	hp	laserjet_p4010	*	Yes
Hardware	hp	laserjet_p4014	*	Yes
Hardware	hp	laserjet_p4015	*	Yes
Hardware	hp	laserjet_p4500	*	Yes
Hardware	hp	laserjet_p4510	*	Yes

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566 Vendor Advisory ([email protected])
http://osvdb.org/52847 ([email protected])
http://osvdb.org/52848 ([email protected])
http://osvdb.org/52849 ([email protected])
http://www.louhinetworks.fi/advisory/HP_20090317.txt Exploit ([email protected])
http://www.securityfocus.com/archive/1/501884/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/34143 ([email protected])
http://www.vupen.com/english/advisories/2009/0754 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/52847 (af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/52848 (af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/52849 (af854a3a-2127-422b-91ae-364da2661108)
http://www.louhinetworks.fi/advisory/HP_20090317.txt Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/501884/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/34143 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/0754 (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For hp's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.