CVE-2001-1040

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact PARTIAL

H

P LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.

References

Link	Resource
http://www.securityfocus.com/archive/1/201224	Vendor Advisory
http://www.securityfocus.com/bid/3132	Patch Vendor Advisory
http://www.securityfocus.com/archive/1/201224	Vendor Advisory
http://www.securityfocus.com/bid/3132	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hp:jetadmin:4.0:::::::*
	cpe:2.3:a:hp:jetadmin:4.1.2:::::::*
	cpe:2.3:a:hp:jetadmin:5.1:::::::*
	cpe:2.3:a:hp:jetadmin:5.5:::::::*
	cpe:2.3:a:hp:jetadmin:5.5.177:::::::*
	cpe:2.3:a:hp:jetadmin:5.6:::::::*
	cpe:2.3:a:hp:jetadmin:6.0:::::::*
	cpe:2.3:a:hp:jetadmin:6.1:::::::*
	cpe:2.3:a:hp:jetadmin:6.2:::::::*

History

20 Nov 2024, 23:36

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/archive/1/201224 - Vendor Advisory~~	() http://www.securityfocus.com/archive/1/201224 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/3132 - Patch, Vendor Advisory~~	() http://www.securityfocus.com/bid/3132 - Patch, Vendor Advisory

Information

Published : 2001-08-31 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2001-1040

Mitre link : CVE-2001-1040

CVE.ORG link : CVE-2001-1040

JSON object : View

Products Affected

jetadmin

CWE

NVD-CWE-Other

{"id": "CVE-2001-1040", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-08-31T04:00:00.000", "references": [{"url": "http://www.securityfocus.com/archive/1/201224", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "http://www.securityfocus.com/bid/3132", "tags": ["Patch", "Vendor Advisory"], "source": "[email protected]"}, {"url": "http://www.securityfocus.com/archive/1/201224", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/3132", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:jetadmin:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "565A8753-31CC-4D4D-BF71-EB4C08A2D47E"}, {"criteria": "cpe:2.3:a:hp:jetadmin:4.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30AAEB5E-184F-4DB4-B0A6-D770D3832B77"}, {"criteria": "cpe:2.3:a:hp:jetadmin:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "012B7A13-0A21-4FCD-8B32-7302545885A9"}, {"criteria": "cpe:2.3:a:hp:jetadmin:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30DA33FB-AFA3-4720-8108-E279D97BADC5"}, {"criteria": "cpe:2.3:a:hp:jetadmin:5.5.177:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F6E0862-A565-4099-9EB7-D02AD6081811"}, {"criteria": "cpe:2.3:a:hp:jetadmin:5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE4F960E-F153-45DF-812F-47AA31C33E55"}, {"criteria": "cpe:2.3:a:hp:jetadmin:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17A6954A-D8E0-4ADF-BB64-329D7589F38A"}, {"criteria": "cpe:2.3:a:hp:jetadmin:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A5E2537-1E27-4962-BFC3-488FF3C2D305"}, {"criteria": "cpe:2.3:a:hp:jetadmin:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "467A92C4-1067-4158-8BA1-367495B1845C"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}