CVE-2010-4107

Published: Nov 17, 2010Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.

Affected (8)

Products: Hp: 9000, Color Laserjet Mfp, Laserjet 4100, Laserjet 4200, Laserjet 4300, Laserjet 5100, Laserjet 8150, Laserjet Mfp

8 products

Color Laserjet Mfp

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Hp 9000	All versions
Hp Color Laserjet Mfp	All versions
Hp Laserjet 4100	All versions
Hp Laserjet 4200	All versions
Hp Laserjet 4300	All versions
Hp Laserjet 5100	All versions
Hp Laserjet 8150	All versions
Hp Laserjet Mfp	All versions

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (18)

http://secunia.com/advisories/42238

Source: hp-security-alert@hp.com

Vendor Advisory

http://securityreason.com/securityalert/8328

Source: hp-security-alert@hp.com

http://securitytracker.com/id?1024741

Source: hp-security-alert@hp.com

http://www.exploit-db.com/exploits/15631

Source: hp-security-alert@hp.com

http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333

Source: hp-security-alert@hp.com

http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf

Source: hp-security-alert@hp.com

http://www.securityfocus.com/bid/44882

Source: hp-security-alert@hp.com

http://www.vupen.com/english/advisories/2010/2987

Source: hp-security-alert@hp.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/63261

Source: hp-security-alert@hp.com

http://secunia.com/advisories/42238

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/8328

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1024741

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.exploit-db.com/exploits/15631

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/44882

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/2987

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/63261

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.