CVE-2010-4107
High
Description
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHp 9000
PublishedNov 17, 2010
First seenNov 17, 2010
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp 9000 | No range specified | — |
| hp color_laserjet_mfp | No range specified | — |
| hp laserjet_4100 | No range specified | — |
| hp laserjet_4200 | No range specified | — |
| hp laserjet_4300 | No range specified | — |
| hp laserjet_5100 | No range specified | — |
| hp laserjet_8150 | No range specified | — |
| hp laserjet_mfp | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.