CVE-2004-2439

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-2439

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

T

he remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.

References
Link Resource
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085 Vendor Advisory
http://securitytracker.com/id?1011671 Vendor Advisory
http://www.securityfocus.com/bid/11297
https://exchange.xforce.ibmcloud.com/vulnerabilities/17634
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085 Vendor Advisory
http://securitytracker.com/id?1011671 Vendor Advisory
http://www.securityfocus.com/bid/11297
https://exchange.xforce.ibmcloud.com/vulnerabilities/17634
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:hp:color_laserjet:4650:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet:5500:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet:5550:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_2500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_3000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_3700:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4100_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4200:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_4300:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9000:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9000_mfp:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9040_mpf:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9050_mpf:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9055:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9065:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9500:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_9500_mpf:*:*:*:*:*:*:*:*
History

20 Nov 2024, 23:53

Type Values Removed Values Added
References () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085 - Vendor Advisory () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085 - Vendor Advisory
References () http://securitytracker.com/id?1011671 - Vendor Advisory () http://securitytracker.com/id?1011671 - Vendor Advisory
References () http://www.securityfocus.com/bid/11297 - () http://www.securityfocus.com/bid/11297 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/17634 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/17634 -
Information

Published : 2004-12-31 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-2439

Mitre link : CVE-2004-2439

CVE.ORG link : CVE-2004-2439

JSON object : View

Products Affected

hp

CWE
NVD-CWE-Other