CVE-2001-1040

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/archive/1/201224	Vendor Advisory
http://www.securityfocus.com/bid/3132	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hp:jetadmin:4.0:::::::*
	cpe:2.3:a:hp:jetadmin:4.1.2:::::::*
	cpe:2.3:a:hp:jetadmin:5.1:::::::*
	cpe:2.3:a:hp:jetadmin:5.5:::::::*
	cpe:2.3:a:hp:jetadmin:5.5.177:::::::*
	cpe:2.3:a:hp:jetadmin:5.6:::::::*
	cpe:2.3:a:hp:jetadmin:6.0:::::::*
	cpe:2.3:a:hp:jetadmin:6.1:::::::*
	cpe:2.3:a:hp:jetadmin:6.2:::::::*

History

No history.

Information

Published : 2001-08-31 04:00

Updated : 2023-12-10 10:17

NVD link : CVE-2001-1040

Mitre link : CVE-2001-1040

CVE.ORG link : CVE-2001-1040

JSON object : View

Products Affected

hp

jetadmin

CWE

NVD-CWE-Other

{"id": "CVE-2001-1040", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-08-31T04:00:00.000", "references": [{"url": "http://www.securityfocus.com/archive/1/201224", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3132", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password."}], "lastModified": "2008-09-05T20:25:32.237", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:jetadmin:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "565A8753-31CC-4D4D-BF71-EB4C08A2D47E"}, {"criteria": "cpe:2.3:a:hp:jetadmin:4.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30AAEB5E-184F-4DB4-B0A6-D770D3832B77"}, {"criteria": "cpe:2.3:a:hp:jetadmin:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "012B7A13-0A21-4FCD-8B32-7302545885A9"}, {"criteria": "cpe:2.3:a:hp:jetadmin:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30DA33FB-AFA3-4720-8108-E279D97BADC5"}, {"criteria": "cpe:2.3:a:hp:jetadmin:5.5.177:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F6E0862-A565-4099-9EB7-D02AD6081811"}, {"criteria": "cpe:2.3:a:hp:jetadmin:5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE4F960E-F153-45DF-812F-47AA31C33E55"}, {"criteria": "cpe:2.3:a:hp:jetadmin:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17A6954A-D8E0-4ADF-BB64-329D7589F38A"}, {"criteria": "cpe:2.3:a:hp:jetadmin:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A5E2537-1E27-4962-BFC3-488FF3C2D305"}, {"criteria": "cpe:2.3:a:hp:jetadmin:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "467A92C4-1067-4158-8BA1-367495B1845C"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}