RETIRED: HP Printers and HP Digital Sender Firmware Update Remote Code Execution Vulnerability

Bugtraq ID:	51324
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jan 09 2012 12:00AM
Updated:	Jan 27 2014 12:34AM
Credit:	HP
Vulnerable:	HP LaserJet Professional CP5225 Printer 0 HP LaserJet Pro M1536 Multifunction Printer 0 HP LaserJet Pro CP1525 Color Printer 0 HP LaserJet Pro CM1415 Color Multifunction Printer 0 HP LaserJet P4515 0 HP LaserJet P4015 0 HP LaserJet P4014 0 HP LaserJet P3005 0 HP LaserJet P2055 0 HP LaserJet P2035 0 HP LaserJet M9050 MFP 0 HP LaserJet M9040 0 HP LaserJet M5035 0 HP LaserJet M5025 0 HP LaserJet M4345 0 HP LaserJet M3027 0 HP LaserJet M2727 Multifunction Printer 0 HP LaserJet M1522 Multifunction Printer 0 HP LaserJet Enterprise P3015 0 HP LaserJet Enterprise M4555 0 HP LaserJet Enterprise 600 M603 HP LaserJet Enterprise 600 M602 HP LaserJet Enterprise 600 M601 HP LaserJet 9050 0 HP LaserJet 9040 0 HP LaserJet 5200n 0 HP LaserJet 5200L 0 HP LaserJet 4350 0 HP LaserJet 4250 0 HP LaserJet 4240 0 HP LaserJet M3035 HP DS9200c Digital Sender 0 HP Digital Sender 9200C 0 HP Color LaserJet Enterprise CM4540 0 HP Color LaserJet CP6015 0 HP Color LaserJet CP5525 0 HP Color LaserJet CP4525 0 HP Color LaserJet CP4005n 0 HP Color LaserJet CP3505 0 HP Color LaserJet CP2025 0 HP Color LaserJet CP1510 0 HP Color LaserJet CM6040 0 HP Color LaserJet CM6030 0 HP Color LaserJet CM4730 MFP 0 HP Color LaserJet CM3530 0 HP Color LaserJet CM2320 Multifunction Printer 0 HP Color LaserJet CM1312 Multifunction Printer 0 HP Color LaserJet 5550 HP Color LaserJet 4730mfp 0 HP Color LaserJet 4730 MFP 0 HP Color LaserJet 4700n 0 HP Color LaserJet 3800n 0 HP Color LaserJet CP3525 HP Color LaserJet 3000 HP CM8060 Color MFP with Edgeline 0
Not Vulnerable:

RETIRED: HP Printers and HP Digital Sender Firmware Update Remote Code Execution Vulnerability

HP Printers and HP Digital Senders are prone to a remote code-execution vulnerability.

Successfully exploiting this issue allows an attacker to execute arbitrary code with administrative privileges. A successful exploit will result in the complete compromise of affected devices.

This BID is being retired. The issue is already documented in BID 50876 (HP Printers and Digital Senders Remote Firmware Update Security Bypass Vulnerability).

RETIRED: HP Printers and HP Digital Sender Firmware Update Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: HP Printers and HP Digital Sender Firmware Update Remote Code Execution Vulnerability

Solution:
Vendor updates are available. Please see the referenced advisory for more information.

RETIRED: HP Printers and HP Digital Sender Firmware Update Remote Code Execution Vulnerability

References:

• HP Homepage (HP)
  
• [security bulletin] HPSBPI02728 SSRT100692 rev.3 - Certain HP Printers and HP Di ([email protected])