{"cve":"CVE-2011-4161","nvd":{"published":"2011-12-01T21:55:00.707","modified":"2026-06-16T23:34:31.567","status":"Modified","description":"The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.","cvss_v4":null,"cvss_v3":null,"cwes":["CWE-264"],"references":["http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449","http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112","http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say","http://secunia.com/advisories/47063","http://www.kb.cert.org/vuls/id/717921"],"products":["hp:color_laserjet_3000","hp:color_laserjet_3800","hp:color_laserjet_4700","hp:color_laserjet_4730","hp:color_laserjet_4730_mfp","hp:color_laserjet_5550","hp:color_laserjet_9500","hp:color_laserjet_cm3530","hp:color_laserjet_cm4540","hp:color_laserjet_cm4730","hp:color_laserjet_cm6030","hp:color_laserjet_cm6040","hp:color_laserjet_cp3505","hp:color_laserjet_cp3525","hp:color_laserjet_cp4005","hp:color_laserjet_cp5525","hp:color_laserjet_cp6015","hp:color_laserjet_enterprise_cp4520","hp:color_laserjet_enterprise_cp4525","hp:color_mfp_cm8060","hp:digital_sender_9200c","hp:digital_sender_9250c","hp:laserjet_4240","hp:laserjet_4250","hp:laserjet_4345_mfp","hp:laserjet_4350","hp:laserjet_5200","hp:laserjet_9040","hp:laserjet_9050","hp:laserjet_enterprise_500_color","hp:laserjet_enterprise_600","hp:laserjet_enterprise_m4555","hp:laserjet_enterprise_p3015","hp:laserjet_m3035","hp:laserjet_m5035","hp:laserjet_m9040","hp:laserjet_m9050","hp:laserjet_p3005","hp:laserjet_p4014","hp:laserjet_p4015","hp:laserjet_p4515"],"source":"nvd","synced_at":"2026-10-19T19:59:31.623151214+00:00"},"epss":{"cve":"CVE-2011-4161","score":0.1415,"percentile":0.96576,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}