CVE-2009-0941
hp: no CVSS score yet. EPSS 3.0% chance of exploitation in the next 30 days.
The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.
- EPSS
- 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:8100c_digital_sender
- hp:9100c_digital_sender
- hp:9200c_digital_sender
- hp:9250c_digital_sender
- hp:color_laserjet
- hp:color_laserjet_1500
- hp:color_laserjet_2500
- hp:color_laserjet_2500l
- hp:color_laserjet_2500lse
- hp:color_laserjet_2500n
- hp:color_laserjet_2500tn
- hp:color_laserjet_2605dtn
- hp:color_laserjet_4370mfp
- hp:color_laserjet_4600
- hp:color_laserjet_4600dn
- hp:color_laserjet_4600dtn
- hp:color_laserjet_4600hdn
- hp:color_laserjet_4650
- hp:color_laserjet_4700
- hp:color_laserjet_4730_mfp
- hp:color_laserjet_5500
- hp:color_laserjet_5550
- hp:color_laserjet_8500
- hp:color_laserjet_8550
- hp:color_laserjet_9500
- hp:color_laserjet_9500_mfp
- hp:color_laserjet_9500mfp
- hp:color_mfp_cm8050
- hp:color_mfp_cm8060
- hp:digital_senders
- hp:edgeline_printers
- hp:laserjet_1000
- hp:laserjet_1005
- hp:laserjet_1010
- hp:laserjet_1012
- hp:laserjet_1015
- hp:laserjet_1018
- hp:laserjet_1018s
- hp:laserjet_1020
- hp:laserjet_1020_plus
- hp:laserjet_1022
- hp:laserjet_1022n
- hp:laserjet_1022nw
- hp:laserjet_1100
- hp:laserjet_1150
- hp:laserjet_1160
- hp:laserjet_1200
- hp:laserjet_1300
- hp:laserjet_1320
- hp:laserjet_2
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566
- http://www.louhinetworks.fi/advisory/HP_20090317.txt
- http://www.securityfocus.com/archive/1/501884/100/0/threaded
- http://www.vupen.com/english/advisories/2009/0754
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566