NVD

Id
10676  
Name
CVE-2011-4161  
Description
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-12-01  
Modified Date
2012-09-17  
Seq
2011-4161  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60310 10676 CVE-2011-4161 HPSBPI02728  View
60311 10676 CVE-2011-4161 http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112  View
60312 10676 CVE-2011-4161 http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say  View
60313 10676 CVE-2011-4161 VU#717921  View
60314 10676 CVE-2011-4161 51324  View
60315 10676 CVE-2011-4161 1026357  View
60316 10676 CVE-2011-4161 [dailydave] 20111130 The Vampire Diaries  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32938 JVNDB-2011-003178 HP CM8060 Color MFP その他の製品のデフォルト設定における任意のコードを実行される脆弱性 HP CM8060 Color MFP その他の製品のデフォルト設定は、リモートファームウェアアップデート (RFU) の設定を有効にしているため、任意のコードを実行される脆弱性が存在します。 CVE-2011-4161 52068 CVE-2011-4161 10676 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003178.html 2011-11-30 2011-12-12 View