CVE-2004-2439
hp: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:color_laserjet
- hp:color_laserjet_4600
- hp:laserjet_2500
- hp:laserjet_3000
- hp:laserjet_3700
- hp:laserjet_4100_mfp
- hp:laserjet_4200
- hp:laserjet_4300
- hp:laserjet_9000
- hp:laserjet_9000_mfp
- hp:laserjet_9040_mpf
- hp:laserjet_9050
- hp:laserjet_9050_mpf
- hp:laserjet_9055
- hp:laserjet_9065
- hp:laserjet_9500
- hp:laserjet_9500_mpf
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085
- http://securitytracker.com/id?1011671
- http://www.securityfocus.com/bid/11297
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17634
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085