CVE-2013-4829

Published: Oct 4, 2013Modified: Apr 29, 2026

1.5

Vector

AV:L/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 2.7 / Impact: 2.9

Source: NVD

Description

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors.

Affected (22)

Products: Hp: Color Laserjet Cm4540, Color Laserjet Cm4540f, Color Laserjet Cm4540fskm, Color Laserjet M575dn, Color Laserjet M575f, Color Laserjet M775dn, Color Laserjet M775f, Color Laserjet M775z+, Laserjet Enterprise Color Flow M575c, Laserjet Flow M525c, Laserjet M4555, Laserjet M4555f, Laserjet M4555fskm, Laserjet M4555h, Laserjet M525dn, Laserjet M525f, Laserjet M725dn, Laserjet M725f, Laserjet M725z+, Scanjet Enterprise 8500fn1

20 products

Color Laserjet Cm4540

Color Laserjet Cm4540f

Color Laserjet Cm4540fskm

Color Laserjet M575dn

Color Laserjet M575f

Color Laserjet M775dn

Color Laserjet M775f

Color Laserjet M775z+

Laserjet Enterprise Color Flow M575c

Scanjet Enterprise 8500fn1

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Hp Color Laserjet Cm4540	All versions
Hp Color Laserjet Cm4540f	All versions
Hp Color Laserjet Cm4540fskm	All versions
Hp Color Laserjet M575dn	All versions
Hp Color Laserjet M575f	All versions
Hp Color Laserjet M775dn	All versions
Hp Color Laserjet M775f	All versions
Hp Color Laserjet M775z	All versions
Hp Color Laserjet M775z+	All versions
Hp Laserjet Enterprise Color Flow M575c	All versions
Hp Laserjet Flow M525c	All versions
Hp Laserjet M4555	All versions
Hp Laserjet M4555f	All versions
Hp Laserjet M4555fskm	All versions
Hp Laserjet M4555h	All versions
Hp Laserjet M525dn	All versions
Hp Laserjet M525f	All versions
Hp Laserjet M725dn	All versions
Hp Laserjet M725f	All versions
Hp Laserjet M725z	All versions
Hp Laserjet M725z+	All versions
Hp Scanjet Enterprise 8500fn1	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014

Source: hp-security-alert@hp.com

Vendor Advisory

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.