CVE

Id
38375  
CVE No.
CVE-2009-0940  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
418670 38375 CVE-2009-0940 BUGTRAQ:20090316 HP Laserjet multiple models web management CSRF vulnerability & insecure default configuration  View
418671 38375 CVE-2009-0940 URL:http://www.securityfocus.com/archive/1/archive/1/501884/100/0/threaded  View
418672 38375 CVE-2009-0940 MISC:http://www.louhinetworks.fi/advisory/HP_20090317.txt  View
418673 38375 CVE-2009-0940 HP:HPSN-2009-001  View
418674 38375 CVE-2009-0940 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566  View
418675 38375 CVE-2009-0940 BID:34143  View
418676 38375 CVE-2009-0940 URL:http://www.securityfocus.com/bid/34143  View
418677 38375 CVE-2009-0940 OSVDB:52847  View
418678 38375 CVE-2009-0940 URL:http://osvdb.org/52847  View
418679 38375 CVE-2009-0940 OSVDB:52848  View
418680 38375 CVE-2009-0940 URL:http://osvdb.org/52848  View
418681 38375 CVE-2009-0940 OSVDB:52849  View
418682 38375 CVE-2009-0940 URL:http://osvdb.org/52849  View
418683 38375 CVE-2009-0940 VUPEN:ADV-2009-0754  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40328 JVNDB-2009-001334 Apple Mac OS X の Microsoft Office Spotlight Importer における任意のコードを実行される脆弱性 Apple Mac OS X の Spotlight にある Microsoft Office Spotlight Importer には、Microsoft Office ファイルを正しく検証しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2009-0944 38375 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001334.html  View