QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-4107

Back to search

CVE-2010-4107

Published: Nov 17, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.

VendorProductVersions

n/a

n/a

affected
n/a

References

1024741
vdb-entry
x_refsource_SECTRACK
15631
exploit
x_refsource_EXPLOIT-DB
8328
third-party-advisory
x_refsource_SREASON
HPSBPI02575
vendor-advisory
x_refsource_HP
42238
third-party-advisory
x_refsource_SECUNIA
ADV-2010-2987
vdb-entry
x_refsource_VUPEN
44882
vdb-entry
x_refsource_BID
SSRT090255
vendor-advisory
x_refsource_HP

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now