NVD

Id
48252  
Name
CVE-2009-0940  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-03-18  
Modified Date
2009-10-13  
Seq
2009-0940  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242577 48252 CVE-2009-0940 HPSN-2009-001  View
242578 48252 CVE-2009-0940 http://www.louhinetworks.fi/advisory/HP_20090317.txt  View
242579 48252 CVE-2009-0940 20090316 HP Laserjet multiple models web management CSRF vulnerability & insecure default configuration  View
242580 48252 CVE-2009-0940 34143  View
242581 48252 CVE-2009-0940 ADV-2009-0754  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40452 JVNDB-2009-001458 HP LaserJet Printer、 HP Edgeline Printer、 および HP Digital Sender 上で稼動する HP Embedded Web Server (EWS) における複数のクロスサイトリクエストフォージェリの脆弱性 HP LaserJet Printer、 HP Edgeline Printer、 および HP Digital Sender 上で稼動する HP Embedded Web Server (EWS) には、複数のクロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2009-0940 38371 CVE-2009-0940 48252 5.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001458.html 2009-03-18 2009-06-30 View