CVE-2004-2439

HP LaserJet 4200 and 4300 - Unauthenticated Firmware Upgrade

Title source: llm
STIX 2.1

Description

The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17634
Vendor Advisory vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1011671
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11297

Scores

EPSS 0.0103
EPSS Percentile 77.5%

Details

Status published
Products (19)
hp/color_laserjet 4650
hp/color_laserjet 5500
hp/color_laserjet 5550
hp/color_laserjet_4600
hp/laserjet_2500
hp/laserjet_3000
hp/laserjet_3700
hp/laserjet_4100_mfp
hp/laserjet_4200
hp/laserjet_4300
... and 9 more
Published Dec 31, 2004
Tracked Since Feb 18, 2026