HIGH🇵🇱 Wersja polska

CVE-2011-4161

CVSS 10.0v2.0pub. 2011-12-01upd. 2026-04-29

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • HP Color Laserjet 3000

    HW
    Hp
    all versions

  • HP Color Laserjet 3800

    HW
    Hp
    all versions

  • HP Color Laserjet 4700

    HW
    Hp
    all versions

  • HP Color Laserjet 4730

    HW
    Hp
    mfp

  • HP Color Laserjet 4730 Mfp

    HW
    Hp
    all versions

  • HP Color Laserjet 5550

    HW
    Hp
    all versions

  • HP Color Laserjet 9500

    HW
    Hp
    all versions

  • HP Color Laserjet Cm3530

    HW
    Hp
    all versions

  • HP Color Laserjet Cm4540

    HW
    Hp
    mfp

  • HP Color Laserjet Cm4730

    HW
    Hp
    mfp

  • HP Color Laserjet Cm6030

    HW
    Hp
    all versions

  • HP Color Laserjet Cm6040

    HW
    Hp
    all versions

  • HP Color Laserjet Cp3505

    HW
    Hp
    all versions

  • HP Color Laserjet Cp3525

    HW
    Hp
    all versions

  • HP Color Laserjet Cp4005

    HW
    Hp
    all versions

  • HP Color Laserjet Cp5525

    HW
    Hp
    all versions

  • HP Color Laserjet Cp6015

    HW
    Hp
    all versions

  • HP Color Laserjet Enterprise Cp4520

    HW
    Hp
    all versions

  • HP Color Laserjet Enterprise Cp4525

    HW
    Hp
    all versions

  • HP Color Mfp Cm8060

    HW
    Hp
    all versions

  • HP Digital Sender 9200c

    HW
    Hp
    all versions

  • HP Digital Sender 9250c

    HW
    Hp
    all versions

  • HP Laserjet 4240

    HW
    Hp
    all versions

  • HP Laserjet 4250

    HW
    Hp
    all versions

  • HP Laserjet 4345 Mfp

    HW
    Hp
    all versions

  • HP Laserjet 4350

    HW
    Hp
    all versions

  • HP Laserjet 5200

    HW
    Hp
    all versions

  • HP Laserjet 9040

    HW
    Hp
    all versions

  • HP Laserjet 9050

    HW
    Hp
    all versions

  • HP Laserjet Enterprise 500 Color

    HW
    Hp
    m551
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2018-5923CRITICAL9.8PL ✓same product

Błąd weryfikacji podpisów aplikacji w drukarkach HP — wykonanie kodu

CVE-2009-0941HIGH7.6same product

The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no manage...

CVE-2008-4419HIGH7.8same product

Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embed...

CVE-2013-4828MEDIUM4.3same product

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color La...

CVE-2012-5221MEDIUM5.0same product

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, ...