Description
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.
Affected products
- HP / color_laserjet4650 – 4650
- HP / color_laserjet5500 – 5500
- HP / color_laserjet5550 – 5550
- HP / color_laserjet_4600
- HP / laserjet_2500
- HP / laserjet_3000
- HP / laserjet_3700
- HP / laserjet_4100_mfp
- HP / laserjet_4200
- HP / laserjet_4300
- HP / laserjet_9000
- HP / laserjet_9000_mfp
- HP / laserjet_9040_mpf
- HP / laserjet_9050
- HP / laserjet_9050_mpf
- HP / laserjet_9055
- HP / laserjet_9065
- HP / laserjet_9500
- HP / laserjet_9500_mpf