ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HHP Chaivm Ezloader
APPHpall versionsHP Laserjet 4100
HWHpall versionsHP Laserjet 4500
HWHpall versionsHP Laserjet 4550
HWHpall versionsHP Laserjet 8150
HWHpall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
References
Related vulnerabilities
CVE-2010-4107HIGH7.8same product
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet M...
CVE-2009-0941HIGH7.6same product
The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no manage...
CVE-2009-0940MEDIUM5.1same product
Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet ...
CVE-2017-5638CRITICAL9.8⚠ KEVPL ✓same vendor
RCE w Apache Struts 2 poprzez błędną obsługę nagłówków HTTP (Jakarta Multipart parser)
CVE-2015-3113CRITICAL9.8⚠ KEVPL ✓same vendor
RCE w Adobe Flash Player — heap-based buffer overflow (CVE-2015-3113)