CVE-2011-4161

no score yetEPSS 14%

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2011-12-01
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

hp:color_laserjet_3000
hp:color_laserjet_3800
hp:color_laserjet_4700
hp:color_laserjet_4730
hp:color_laserjet_4730_mfp
hp:color_laserjet_5550
hp:color_laserjet_9500
hp:color_laserjet_cm3530
hp:color_laserjet_cm4540
hp:color_laserjet_cm4730
hp:color_laserjet_cm6030
hp:color_laserjet_cm6040
hp:color_laserjet_cp3505
hp:color_laserjet_cp3525
hp:color_laserjet_cp4005
hp:color_laserjet_cp5525
hp:color_laserjet_cp6015
hp:color_laserjet_enterprise_cp4520
hp:color_laserjet_enterprise_cp4525
hp:color_mfp_cm8060
hp:digital_sender_9200c
hp:digital_sender_9250c
hp:laserjet_4240
hp:laserjet_4250
hp:laserjet_4345_mfp
hp:laserjet_4350
hp:laserjet_5200
hp:laserjet_9040
hp:laserjet_9050
hp:laserjet_enterprise_500_color
hp:laserjet_enterprise_600
hp:laserjet_enterprise_m4555
hp:laserjet_enterprise_p3015
hp:laserjet_m3035
hp:laserjet_m5035
hp:laserjet_m9040
hp:laserjet_m9050
hp:laserjet_p3005
hp:laserjet_p4014
hp:laserjet_p4015
hp:laserjet_p4515

References

Check your stack JSON