CVE-2011-4161

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.

La configuración por defecto de la impresora HP CM8060 Color MFP con Edgeline, y las impresoras HP Color 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx y Enterprise CPxxxx; las Digital Sender 9200c y 9250c; LaserJet 4xxx, 5200, 90XX, Mxxxx y Pxxxx y LaserJet Enterprise 500 color M551, 600, M4555 MFP, y P3015 permite la actualización remota del firmware (RFU), lo que permite a atacantes remotos ejecutar código de su elección mediante la apertura de una sesión en el puerto TCP 9100 para subir una actualización de firmware diseñada por el atacante.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-10-21 CVE Reserved
2011-12-01 CVE Published
2023-12-20 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (8)

URL	Tag	Source
http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112	X_refsource_misc
http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say	X_refsource_misc
http://secunia.com/advisories/47063	Third Party Advisory
http://www.kb.cert.org/vuls/id/717921	Third Party Advisory
http://www.securityfocus.com/bid/51324	Vdb Entry
http://www.securitytracker.com/id?1026357	Vdb Entry
https://lists.immunityinc.com/pipermail/dailydave/2011-November/000378.html	Mailing List

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449	2012-09-18

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Hp Search vendor "Hp"		Color Laserjet 3000 Search vendor "Hp" for product "Color Laserjet 3000"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet 3800 Search vendor "Hp" for product "Color Laserjet 3800"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet 4700 Search vendor "Hp" for product "Color Laserjet 4700"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet 4730 Search vendor "Hp" for product "Color Laserjet 4730"				mfp Search vendor "Hp" for product "Color Laserjet 4730" and version "mfp"		-		Affected
Hp Search vendor "Hp"		Color Laserjet 4730 Mfp Search vendor "Hp" for product "Color Laserjet 4730 Mfp"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet 5550 Search vendor "Hp" for product "Color Laserjet 5550"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet 9500 Search vendor "Hp" for product "Color Laserjet 9500"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet Cm3530 Search vendor "Hp" for product "Color Laserjet Cm3530"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet Cm4540 Search vendor "Hp" for product "Color Laserjet Cm4540"				mfp Search vendor "Hp" for product "Color Laserjet Cm4540" and version "mfp"		-		Affected
Hp Search vendor "Hp"		Color Laserjet Cm4730 Search vendor "Hp" for product "Color Laserjet Cm4730"				mfp Search vendor "Hp" for product "Color Laserjet Cm4730" and version "mfp"		-		Affected
Hp Search vendor "Hp"		Color Laserjet Cm6030 Search vendor "Hp" for product "Color Laserjet Cm6030"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet Cm6040 Search vendor "Hp" for product "Color Laserjet Cm6040"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet Cp3505 Search vendor "Hp" for product "Color Laserjet Cp3505"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet Cp3525 Search vendor "Hp" for product "Color Laserjet Cp3525"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet Cp4005 Search vendor "Hp" for product "Color Laserjet Cp4005"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet Cp5525 Search vendor "Hp" for product "Color Laserjet Cp5525"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet Cp6015 Search vendor "Hp" for product "Color Laserjet Cp6015"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet Enterprise Cp4520 Search vendor "Hp" for product "Color Laserjet Enterprise Cp4520"				*		-		Affected
Hp Search vendor "Hp"		Color Laserjet Enterprise Cp4525 Search vendor "Hp" for product "Color Laserjet Enterprise Cp4525"				*		-		Affected
Hp Search vendor "Hp"		Color Mfp Cm8060 Search vendor "Hp" for product "Color Mfp Cm8060"				-		edgeline		Affected
Hp Search vendor "Hp"		Digital Sender 9200c Search vendor "Hp" for product "Digital Sender 9200c"				*		-		Affected
Hp Search vendor "Hp"		Digital Sender 9250c Search vendor "Hp" for product "Digital Sender 9250c"				*		-		Affected
Hp Search vendor "Hp"		Laserjet 4240 Search vendor "Hp" for product "Laserjet 4240"				*		-		Affected
Hp Search vendor "Hp"		Laserjet 4250 Search vendor "Hp" for product "Laserjet 4250"				*		-		Affected
Hp Search vendor "Hp"		Laserjet 4345 Mfp Search vendor "Hp" for product "Laserjet 4345 Mfp"				*		-		Affected
Hp Search vendor "Hp"		Laserjet 4350 Search vendor "Hp" for product "Laserjet 4350"				*		-		Affected
Hp Search vendor "Hp"		Laserjet 5200 Search vendor "Hp" for product "Laserjet 5200"				*		-		Affected
Hp Search vendor "Hp"		Laserjet 9040 Search vendor "Hp" for product "Laserjet 9040"				*		-		Affected
Hp Search vendor "Hp"		Laserjet 9050 Search vendor "Hp" for product "Laserjet 9050"				*		-		Affected
Hp Search vendor "Hp"		Laserjet Enterprise 500 Color Search vendor "Hp" for product "Laserjet Enterprise 500 Color"				m551 Search vendor "Hp" for product "Laserjet Enterprise 500 Color" and version "m551"		-		Affected
Hp Search vendor "Hp"		Laserjet Enterprise 600 Search vendor "Hp" for product "Laserjet Enterprise 600"				m601 Search vendor "Hp" for product "Laserjet Enterprise 600" and version "m601"		-		Affected
Hp Search vendor "Hp"		Laserjet Enterprise 600 Search vendor "Hp" for product "Laserjet Enterprise 600"				m602 Search vendor "Hp" for product "Laserjet Enterprise 600" and version "m602"		-		Affected
Hp Search vendor "Hp"		Laserjet Enterprise 600 Search vendor "Hp" for product "Laserjet Enterprise 600"				m603 Search vendor "Hp" for product "Laserjet Enterprise 600" and version "m603"		-		Affected
Hp Search vendor "Hp"		Laserjet Enterprise M4555 Search vendor "Hp" for product "Laserjet Enterprise M4555"				mfp Search vendor "Hp" for product "Laserjet Enterprise M4555" and version "mfp"		-		Affected
Hp Search vendor "Hp"		Laserjet Enterprise P3015 Search vendor "Hp" for product "Laserjet Enterprise P3015"				*		-		Affected
Hp Search vendor "Hp"		Laserjet M3035 Search vendor "Hp" for product "Laserjet M3035"				*		-		Affected
Hp Search vendor "Hp"		Laserjet M5035 Search vendor "Hp" for product "Laserjet M5035"				*		-		Affected
Hp Search vendor "Hp"		Laserjet M9040 Search vendor "Hp" for product "Laserjet M9040"				*		-		Affected
Hp Search vendor "Hp"		Laserjet M9050 Search vendor "Hp" for product "Laserjet M9050"				*		-		Affected
Hp Search vendor "Hp"		Laserjet P3005 Search vendor "Hp" for product "Laserjet P3005"				*		-		Affected
Hp Search vendor "Hp"		Laserjet P4014 Search vendor "Hp" for product "Laserjet P4014"				*		-		Affected
Hp Search vendor "Hp"		Laserjet P4015 Search vendor "Hp" for product "Laserjet P4015"				*		-		Affected
Hp Search vendor "Hp"		Laserjet P4515 Search vendor "Hp" for product "Laserjet P4515"				*		-		Affected