CVE-2011-4785

CVSS V2 High 7.8 CVSS V3 None

Description

Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 printer with firmware 08.113.0_I35128 allows remote attackers to read arbitrary files via unspecified vectors, a different vulnerability than CVE-2008-4419.

Overview

CVE ID
CVE-2011-4785

Assigner
hp-security-alert@hp.com

Vulnerability Status
Modified

Published Version
2012-01-10T11:55:05

Last Modified Date
2017-08-29T01:30:35

Weakness Enumerations

CWE	URL
CWE-200	http://cwe.mitre.org/data/definitions/200.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version End
		AND
cpe:2.3:a:hp:hp-chaisoe:1.0:::::::*	1	OR
cpe:2.3:h:hp:laserjet_2430:08.113.0_i35128:::::::*	0	OR
cpe:2.3:h:hp:laserjet_4650:07.006.0:::::::*	0	OR
cpe:2.3:h:hp:laserjet_p3015::::::::	0	OR	07.080

CVSS Version 2

Version
2.0

Vector String
AV:N/AC:L/Au:N/C:C/I:N/A:N

Access Vector
NETWORK

Access Compatibility
LOW

Authentication
NONE

Confidentiality Impact
COMPLETE

Integrity Impact
NONE

Availability Impact
NONE

Base Score
7.8

Severity
HIGH

Exploitability Score
10

Impact Score
6.9

References

Reference URL	Reference Tags
http://www.securityfocus.com/archive/1/521165
http://www.securityfocus.com/archive/1/521160
http://www.securityfocus.com/bid/51329
http://secunia.com/advisories/47457
http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0116.html
http://osvdb.org/78224
https://exchange.xforce.ibmcloud.com/vulnerabilities/72227

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2011-4785
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4785

History

Created	Old Value	New Value	Data Type	Notes
2022-05-10 08:52:11				Added to TrackCVE