Unscored severity · published Dec 1, 2011
CVE-2011-4161
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c;…
–
CVSS
14.2%
EPSS
No
On KEV
Description
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Color Laserjet 3000 · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 3800 · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 4700 · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 4730 · HP
mfp · source: NVD
CL
Color Laserjet 4730 Mfp · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 5550 · HP
All versions, or not specified · source: NVD
CL
Color Laserjet 9500 · HP
All versions, or not specified · source: NVD
CL
Color Laserjet Cm3530 · HP
All versions, or not specified · source: NVD
CL
Color Laserjet Cm4540 · HP
mfp · source: NVD
CL
Color Laserjet Cm4730 · HP
mfp · source: NVD
CL
Color Laserjet Cm6030 · HP
All versions, or not specified · source: NVD
CL
Color Laserjet Cm6040 · HP
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4161
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4161
Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449
isc.sans.org
http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112
redtape.msnbc.msn.com
http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say
secunia.com
http://secunia.com/advisories/47063
US Government Resource
http://www.kb.cert.org/vuls/id/717921
www.securityfocus.com
http://www.securityfocus.com/bid/51324
More from Color Laserjet 3000
–
CVE-2012-5221
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise…