MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2009-0940

CVSS 5.1v2.0pub. 2009-03-18upd. 2026-04-23

Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.

CVSS Vector
AV:N/AC:H/Au:N/C:P/I:P/A:P

  • HP 8100c Digital Sender

    HW
    Hp
    all versions

  • HP 9100c Digital Sender

    HW
    Hp
    all versions

  • HP 9200c Digital Sender

    HW
    Hp
    all versions

  • HP 9250c Digital Sender

    HW
    Hp
    all versions

  • HP Color Laserjet

    HW
    Hp
    all versions

  • HP Color Laserjet 1500

    HW
    Hp
    all versions

  • HP Color Laserjet 2500

    HW
    Hp
    all versions

  • HP Color Laserjet 2500l

    HW
    Hp
    all versions

  • HP Color Laserjet 2500lse

    HW
    Hp
    all versions

  • HP Color Laserjet 2500n

    HW
    Hp
    all versions

  • HP Color Laserjet 2500tn

    HW
    Hp
    all versions

  • HP Color Laserjet 2605dtn

    HW
    Hp
    all versions

  • HP Color Laserjet 4370mfp

    HW
    Hp
    20081211_46.211.2

  • HP Color Laserjet 4600

    HW
    Hp
    all versions

  • HP Color Laserjet 4600dn

    HW
    Hp
    all versions

  • HP Color Laserjet 4600dtn

    HW
    Hp
    all versions

  • HP Color Laserjet 4600hdn

    HW
    Hp
    all versions

  • HP Color Laserjet 4650

    HW
    Hp
    all versions

  • HP Color Laserjet 4700

    HW
    Hp
    all versions

  • HP Color Laserjet 4730 Mfp

    HW
    Hp
    all versions

  • HP Color Laserjet 5500

    HW
    Hp
    all versions

  • HP Color Laserjet 5550

    HW
    Hp
    all versions

  • HP Color Laserjet 8500

    HW
    Hp
    all versions

  • HP Color Laserjet 8550

    HW
    Hp
    all versions

  • HP Color Laserjet 9500

    HW
    Hp
    all versions

  • HP Color Laserjet 9500 Mfp

    HW
    Hp
    all versions

  • HP Color Laserjet 9500mfp

    HW
    Hp
    20070719_05.011.2

  • HP Color Mfp Cm8050

    HW
    Hp
    all versions

  • HP Color Mfp Cm8060

    HW
    Hp
    all versions

  • HP Digital Senders

    HW
    Hp
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2011-4785HIGH7.8same product

Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmw...

CVE-2011-4161HIGH10.0same product

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMx...

CVE-2010-4107HIGH7.8same product

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet M...

CVE-2009-0941HIGH7.6same product

The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no manage...

CVE-2008-4419HIGH7.8same product

Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embed...