CVE-2010-4107
- State
- Published
- Severity
- Not scored
- Published
- Nov 17, 2010
- Updated
- Aug 7, 2024
- Reserved
- Oct 27, 2010
Description
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1024741vdb-entry
- 15631exploit
- 8328third-party-advisory
- HPSBPI02575vendor-advisory
- http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf
- 42238third-party-advisory
- ADV-2010-2987vdb-entry
- 44882vdb-entry
- hp-laserjet-pjl-directory-traversal(63261)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.