← Back

CVE-2011-4161

nvd nist
Published: Dec 1, 2011Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.

Affected (43)

Products: Hp: Color Laserjet 3000, Color Laserjet 3800, Color Laserjet 4700, Color Laserjet 4730, Color Laserjet 4730 Mfp, Color Laserjet 5550, Color Laserjet 9500, Color Laserjet Cm3530, Color Laserjet Cm4540, Color Laserjet Cm4730, Color Laserjet Cm6030, Color Laserjet Cm6040, Color Laserjet Cp3505, Color Laserjet Cp3525, Color Laserjet Cp4005, Color Laserjet Cp5525, Color Laserjet Cp6015, Color Laserjet Enterprise Cp4520, Color Laserjet Enterprise Cp4525, Color Mfp Cm8060, Digital Sender 9200c, Digital Sender 9250c, Laserjet 4240, Laserjet 4250, Laserjet 4345 Mfp, Laserjet 4350, Laserjet 5200, Laserjet 9040, Laserjet 9050, Laserjet Enterprise 500 Color, Laserjet Enterprise 600, Laserjet Enterprise M4555, Laserjet Enterprise P3015, Laserjet M3035, Laserjet M5035, Laserjet M9040, Laserjet M9050, Laserjet P3005, Laserjet P4014, Laserjet P4015, Laserjet P4515
Hp
41 products
Color Laserjet 3000
Color Laserjet 3800
Color Laserjet 4700
Color Laserjet 4730
Color Laserjet 4730 Mfp
Color Laserjet 5550
Color Laserjet 9500
Color Laserjet Cm3530
Color Laserjet Cm4540
Color Laserjet Cm4730
Color Laserjet Cm6030
Color Laserjet Cm6040
Color Laserjet Cp3505
Color Laserjet Cp3525
Color Laserjet Cp4005
Color Laserjet Cp5525
Color Laserjet Cp6015
Color Laserjet Enterprise Cp4520
Color Laserjet Enterprise Cp4525
Color Mfp Cm8060
Digital Sender 9200c
Digital Sender 9250c
Laserjet 4240
Laserjet 4250
Laserjet 4345 Mfp
Laserjet 4350
Laserjet 5200
Laserjet 9040
Laserjet 9050
Laserjet Enterprise 500 Color
Laserjet Enterprise 600
Laserjet Enterprise M4555
Laserjet Enterprise P3015
Laserjet M3035
Laserjet M5035
Laserjet M9040
Laserjet M9050
Laserjet P3005
Laserjet P4014
Laserjet P4015
Laserjet P4515
Configuration A
43 vulnerable
Vulnerable SoftwareAffected Versions
Color Laserjet 3000
All versions
Color Laserjet 3800
All versions
Color Laserjet 4700
All versions
Color Laserjet 4730
Version mfp
Color Laserjet 4730 Mfp
All versions
Color Laserjet 5550
All versions
Color Laserjet 9500
All versions
Color Laserjet Cm3530
All versions
Color Laserjet Cm4540
Version mfp
Color Laserjet Cm4730
Version mfp
Color Laserjet Cm6030
All versions
Color Laserjet Cm6040
All versions
Color Laserjet Cp3505
All versions
Color Laserjet Cp3525
All versions
Color Laserjet Cp4005
All versions
Color Laserjet Cp5525
All versions
Color Laserjet Cp6015
All versions
Color Laserjet Enterprise Cp4520
All versions
Color Laserjet Enterprise Cp4525
All versions
Color Mfp Cm8060
All versions
Digital Sender 9200c
All versions
Digital Sender 9250c
All versions
Laserjet 4240
All versions
Laserjet 4250
All versions
Laserjet 4345 Mfp
All versions
Laserjet 4350
All versions
Laserjet 5200
All versions
Laserjet 9040
All versions
Laserjet 9050
All versions
Laserjet Enterprise 500 Color
Version m551
Hp
Laserjet Enterprise 600
Version m601
Laserjet Enterprise 600
Version m602
Laserjet Enterprise 600
Version m603
Laserjet Enterprise M4555
Version mfp
Laserjet Enterprise P3015
All versions
Laserjet M3035
All versions
Laserjet M5035
All versions
Laserjet M9040
All versions
Laserjet M9050
All versions
Laserjet P3005
All versions
Laserjet P4014
All versions
Laserjet P4015
All versions
Laserjet P4515
All versions

Related CWEs

CWE-264
CWE-264

References (16)

Source: hp-security-alert@hp.com
Vendor Advisory
Source: hp-security-alert@hp.com
Source: hp-security-alert@hp.com
Source: hp-security-alert@hp.com
Source: hp-security-alert@hp.com
US Government Resource
Source: hp-security-alert@hp.com
Source: hp-security-alert@hp.com
Source: hp-security-alert@hp.com
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.