Overview
Certain HP LaserJet Professional printers contain a telnet debug shell which could allow a remote attacker to gain unauthorized access to data.
Description
Certain HP LaserJet Professional printers contain a telnet debug shell which could allow a remote attacker to gain unauthorized access to data. For additional vulnerability information and a list of affected devices see HP Security Bulletin HPSBPI02851 SSRT101078. |
Impact
A remote unauthenticated attacker can connect to the telnet debug shell and gain unauthorized access to data. |
Solution
Update |
Restrict access |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | 8.8 | AV:N/AC:M/Au:N/C:N/I:C/A:C |
| Temporal | 6.2 | E:POC/RL:OF/RC:UC |
| Environmental | 1.6 | CDP:L/TD:L/CR:ND/IR:ND/AR:ND |
References
Acknowledgements
Thanks to Christoph von Wittich of Hentschke Bau GmbH for reporting this vulnerability.
This document was written by Michael Orlando.
Other Information
| CVE IDs: | CVE-2012-5215 |
| Date Public: | 2013-03-06 |
| Date First Published: | 2013-03-11 |
| Date Last Updated: | 2013-03-11 12:39 UTC |
| Document Revision: | 8 |