Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-0940

Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.

Published

2009-03-18T21:00:00.377

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

4.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware hp 8100c_digital_sender - Yes
Hardware hp 9100c_digital_sender - Yes
Hardware hp 9200c_digital_sender - Yes
Hardware hp 9250c_digital_sender - Yes
Hardware hp color_laserjet * Yes
Hardware hp color_laserjet_1500 * Yes
Hardware hp color_laserjet_2500 * Yes
Hardware hp color_laserjet_2500l * Yes
Hardware hp color_laserjet_2500lse * Yes
Hardware hp color_laserjet_2500n * Yes
Hardware hp color_laserjet_2500tn * Yes
Hardware hp color_laserjet_2605dtn * Yes
Hardware hp color_laserjet_4370mfp 20081211_46.211.2 Yes
Hardware hp color_laserjet_4600 * Yes
Hardware hp color_laserjet_4600dn * Yes
Hardware hp color_laserjet_4600dtn * Yes
Hardware hp color_laserjet_4600hdn * Yes
Hardware hp color_laserjet_4650 * Yes
Hardware hp color_laserjet_4700 * Yes
Hardware hp color_laserjet_4730_mfp * Yes
Hardware hp color_laserjet_5500 * Yes
Hardware hp color_laserjet_5550 * Yes
Hardware hp color_laserjet_8500 * Yes
Hardware hp color_laserjet_8550 * Yes
Hardware hp color_laserjet_9500 * Yes
Hardware hp color_laserjet_9500_mfp * Yes
Hardware hp color_laserjet_9500mfp 20070719_05.011.2 Yes
Hardware hp color_mfp_cm8050 - Yes
Hardware hp color_mfp_cm8060 - Yes
Hardware hp digital_senders * Yes
Hardware hp edgeline_printers * Yes
Hardware hp laserjet_1000 * Yes
Hardware hp laserjet_1005 * Yes
Hardware hp laserjet_1010 * Yes
Hardware hp laserjet_1012 * Yes
Hardware hp laserjet_1015 * Yes
Hardware hp laserjet_1018 * Yes
Hardware hp laserjet_1018s * Yes
Hardware hp laserjet_1020 * Yes
Hardware hp laserjet_1020_plus * Yes
Hardware hp laserjet_1022 * Yes
Hardware hp laserjet_1022n * Yes
Hardware hp laserjet_1022nw * Yes
Hardware hp laserjet_1100 * Yes
Hardware hp laserjet_1150 * Yes
Hardware hp laserjet_1160 * Yes
Hardware hp laserjet_1200 * Yes
Hardware hp laserjet_1300 * Yes
Hardware hp laserjet_1320 * Yes
Hardware hp laserjet_2 * Yes
Hardware hp laserjet_2000 * Yes
Hardware hp laserjet_2100 * Yes
Hardware hp laserjet_2200 * Yes
Hardware hp laserjet_2200dtn * Yes
Hardware hp laserjet_2300 * Yes
Hardware hp laserjet_2300dn * Yes
Hardware hp laserjet_2400 * Yes
Hardware hp laserjet_2410 20070410_08.112.3 Yes
Hardware hp laserjet_2420 20070410_08.112.3 Yes
Hardware hp laserjet_2430 * Yes
Hardware hp laserjet_2430 20070410_08.112.3 Yes
Hardware hp laserjet_2500 * Yes
Hardware hp laserjet_2500c * Yes
Hardware hp laserjet_2600c * Yes
Hardware hp laserjet_2600n * Yes
Hardware hp laserjet_3000 * Yes
Hardware hp laserjet_3700 * Yes
Hardware hp laserjet_4 * Yes
Hardware hp laserjet_4\/4m * Yes
Hardware hp laserjet_4_plus\/m_plus * Yes
Hardware hp laserjet_4000 * Yes
Hardware hp laserjet_4000n * Yes
Hardware hp laserjet_4050 * Yes
Hardware hp laserjet_4100 * Yes
Hardware hp laserjet_4100_mfp * Yes
Hardware hp laserjet_4100mfp * Yes
Hardware hp laserjet_4200 * Yes
Hardware hp laserjet_4200dtn * Yes
Hardware hp laserjet_4200ln * Yes
Hardware hp laserjet_4240 * Yes
Hardware hp laserjet_4240n * Yes
Hardware hp laserjet_4250 * Yes
Hardware hp laserjet_4250 20080319_08.015.0 Yes
Hardware hp laserjet_4300 * Yes
Hardware hp laserjet_4345_mfp * Yes
Hardware hp laserjet_4345mfp 20081211_09.131.1 Yes
Hardware hp laserjet_4350 * Yes
Hardware hp laserjet_4350 20080319_08.015.0 Yes
Hardware hp laserjet_4350dtn * Yes
Hardware hp laserjet_4650dn * Yes
Hardware hp laserjet_4l\/ml * Yes
Hardware hp laserjet_4m_plus * Yes
Hardware hp laserjet_4p\/mp * Yes
Hardware hp laserjet_4si * Yes
Hardware hp laserjet_4v\/mv * Yes
Hardware hp laserjet_5 * Yes
Hardware hp laserjet_5\/m\/n * Yes
Hardware hp laserjet_500_plus * Yes
Hardware hp laserjet_5000 * Yes
Hardware hp laserjet_5000 r.25.15 Yes
Hardware hp laserjet_5000 r.25.47 Yes
Hardware hp laserjet_5100 * Yes
Hardware hp laserjet_5100 v.29.12 Yes
Hardware hp laserjet_5100dtn * Yes
Hardware hp laserjet_5200 * Yes
Hardware hp laserjet_5l * Yes
Hardware hp laserjet_5m * Yes
Hardware hp laserjet_5p\/mp * Yes
Hardware hp laserjet_5si * Yes
Hardware hp laserjet_8000 * Yes
Hardware hp laserjet_8100 * Yes
Hardware hp laserjet_8150 * Yes
Hardware hp laserjet_8150dn * Yes
Hardware hp laserjet_9000 * Yes
Hardware hp laserjet_9000_mfp * Yes
Hardware hp laserjet_9000mfp * Yes
Hardware hp laserjet_9040 * Yes
Hardware hp laserjet_9040 20080204_08.110.0 Yes
Hardware hp laserjet_9040mfp * Yes
Hardware hp laserjet_9040mfp 20080204_08.110.0 Yes
Hardware hp laserjet_9050 * Yes
Hardware hp laserjet_9050 20080204_08.110.0 Yes
Hardware hp laserjet_9050_mfp * Yes
Hardware hp laserjet_9050mfp * Yes
Hardware hp laserjet_9050mfp 20080204_08.110.0 Yes
Hardware hp laserjet_9055 * Yes
Hardware hp laserjet_9065 * Yes
Hardware hp laserjet_9500 * Yes
Hardware hp laserjet_9500mfp * Yes
Hardware hp laserjet_ii * Yes
Hardware hp laserjet_iid * Yes
Hardware hp laserjet_iii * Yes
Hardware hp laserjet_iiid * Yes
Hardware hp laserjet_iiip * Yes
Hardware hp laserjet_iiisi * Yes
Hardware hp laserjet_iip * Yes
Hardware hp laserjet_iip_plus * Yes
Hardware hp laserjet_m1522n_mfp * Yes
Hardware hp laserjet_m3027_mfp * Yes
Hardware hp laserjet_m3035_mfp * Yes
Hardware hp laserjet_m4345_mfp * Yes
Hardware hp laserjet_m5025_mfp * Yes
Hardware hp laserjet_m5035_mfp * Yes
Hardware hp laserjet_p1000 * Yes
Hardware hp laserjet_p1005 * Yes
Hardware hp laserjet_p1006 * Yes
Hardware hp laserjet_p1007 * Yes
Hardware hp laserjet_p1008 * Yes
Hardware hp laserjet_p1009 * Yes
Hardware hp laserjet_p1500 * Yes
Hardware hp laserjet_p1505 * Yes
Hardware hp laserjet_p1505n * Yes
Hardware hp laserjet_p2000 * Yes
Hardware hp laserjet_p2010 * Yes
Hardware hp laserjet_p2015 * Yes
Hardware hp laserjet_p2030 * Yes
Hardware hp laserjet_p2050 * Yes
Hardware hp laserjet_p3000 * Yes
Hardware hp laserjet_p3005 * Yes
Hardware hp laserjet_p4010 * Yes
Hardware hp laserjet_p4014 * Yes
Hardware hp laserjet_p4015 * Yes
Hardware hp laserjet_p4500 * Yes
Hardware hp laserjet_p4510 * Yes
References