7.6

CVE-2009-0941

The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ 8100c Digital Sender Version -
Hp ≫ 9100c Digital Sender Version -
Hp ≫ 9200c Digital Sender Version -
Hp ≫ 9250c Digital Sender Version -
Hp ≫ Color Laserjet 4370mfp Version 20081211_46.211.2
Hp ≫ Color Laserjet 9500mfp Version 20070719_05.011.2
Hp ≫ Color Mfp Cm8050 Version - Update - Edition edgeline
Hp ≫ Color Mfp Cm8060 Version - Update - Edition edgeline
Hp ≫ Laserjet 2410 Version 20070410_08.112.3
Hp ≫ Laserjet 2420 Version 20070410_08.112.3
Hp ≫ Laserjet 2430 Version 20070410_08.112.3
Hp ≫ Laserjet 4250 Version 20080319_08.015.0
Hp ≫ Laserjet 4345mfp Version 20081211_09.131.1
Hp ≫ Laserjet 4350 Version 20080319_08.015.0
Hp ≫ Laserjet 5000 Version r.25.15
Hp ≫ Laserjet 5000 Version r.25.47
Hp ≫ Laserjet 5100 Version v.29.12
Hp ≫ Laserjet 9040 Version 20080204_08.110.0
Hp ≫ Laserjet 9040mfp Version 20080204_08.110.0
Hp ≫ Laserjet 9050 Version 20080204_08.110.0
Hp ≫ Laserjet 9050mfp Version 20080204_08.110.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.02% 0.857
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566
Vendor Advisory
http://www.louhinetworks.fi/advisory/HP_20090317.txt
http://www.securityfocus.com/archive/1/501884/100/0/threaded
http://www.vupen.com/english/advisories/2009/0754