HP Photosmart Printers Multiple Security Vulnerabilities
BID:47319
Info
HP Photosmart Printers Multiple Security Vulnerabilities
| Bugtraq ID: | 47319 |
| Class: | Unknown |
| CVE: |
CVE-2011-1531 CVE-2011-1532 CVE-2011-1533 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 12 2011 12:00AM |
| Updated: | Apr 12 2011 12:00AM |
| Credit: | HP |
| Vulnerable: |
HP Photosmart Premium Fax All-in-One 0 HP Photosmart Premium C510 series 0 HP Photosmart Premium C310 series 0 HP Photosmart Plus B210 series 0 HP Photosmart D110 series 0 HP Photosmart B110 series 0 HP ENVY 100 D410 series 0 |
| Not Vulnerable: | |
Discussion
HP Photosmart Printers Multiple Security Vulnerabilities
HP Photosmart Printers are prone to multiple security vulnerabilities, including a cross-site scripting vulnerability and an information-disclosure vulnerability.
An attacker may leverage these issues to gain unauthorized access to the affected application, access sensitive information, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected application. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
The following series are affected:
HP Photosmart D110 series
HP Photosmart B110 series
HP Photosmart Plus B210 series
HP Photosmart Premium C310 series
HP Photosmart Premium Fax All-in-One
HP Photosmart Premium C510 series
HP ENVY 100 D410 series
HP Photosmart Printers are prone to multiple security vulnerabilities, including a cross-site scripting vulnerability and an information-disclosure vulnerability.
An attacker may leverage these issues to gain unauthorized access to the affected application, access sensitive information, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected application. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
The following series are affected:
HP Photosmart D110 series
HP Photosmart B110 series
HP Photosmart Plus B210 series
HP Photosmart Premium C310 series
HP Photosmart Premium Fax All-in-One
HP Photosmart Premium C510 series
HP ENVY 100 D410 series
Exploit / POC
HP Photosmart Printers Multiple Security Vulnerabilities
Attackers can exploit these issues using a browser or readily available tools. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
Attackers can exploit these issues using a browser or readily available tools. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
Solution / Fix
HP Photosmart Printers Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
HP Photosmart Printers Multiple Security Vulnerabilities
References:
References: