CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Vulnerability Details : CVE-2009-0941

The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.
Publish Date : 2009-03-18 Last Update Date : 2009-10-13
Search Twitter   Search YouTube   Search Google

- CVSS Scores & Vulnerability Types

CVSS Score
7.6
Confidentiality Impact Complete (There is total information disclosure, resulting in all system files being revealed.)
Integrity Impact Complete (There is a total compromise of system integrity. There is a complete loss of system protection, resulting in the entire system being compromised.)
Availability Impact Complete (There is a total shutdown of the affected resource. The attacker can render the resource completely unavailable.)
Access Complexity High (Specialized access conditions exist. It is hard to exploit and several special conditions must be satisfied to exploit)
Authentication Not required (Authentication is not required to exploit the vulnerability.)
Gained Access None
Vulnerability Type(s)
CWE ID 264

- Products Affected By CVE-2009-0941

# Product Type Vendor Product Version Update Edition Language
1 Hardware HP 8100c Digital Sender - Version Details Vulnerabilities
2 Hardware HP 9100c Digital Sender - Version Details Vulnerabilities
3 Hardware HP 9200c Digital Sender - Version Details Vulnerabilities
4 Hardware HP 9250c Digital Sender - Version Details Vulnerabilities
5 Hardware HP Color Laserjet Version Details Vulnerabilities
6 Hardware HP Color Laserjet 1500 Version Details Vulnerabilities
7 Hardware HP Color Laserjet 2500 Version Details Vulnerabilities
8 Hardware HP Color Laserjet 2500l Version Details Vulnerabilities
9 Hardware HP Color Laserjet 2500lse Version Details Vulnerabilities
10 Hardware HP Color Laserjet 2500n Version Details Vulnerabilities
11 Hardware HP Color Laserjet 2500tn Version Details Vulnerabilities
12 Hardware HP Color Laserjet 2605dtn Version Details Vulnerabilities
13 Hardware HP Color Laserjet 4370mfp 20081211 46.211.2 Version Details Vulnerabilities
14 Hardware HP Color Laserjet 4600 Version Details Vulnerabilities
15 Hardware HP Color Laserjet 4600dn Version Details Vulnerabilities
16 Hardware HP Color Laserjet 4600dtn Version Details Vulnerabilities
17 Hardware HP Color Laserjet 4600hdn Version Details Vulnerabilities
18 Hardware HP Color Laserjet 4650 Version Details Vulnerabilities
19 Hardware HP Color Laserjet 4700 Version Details Vulnerabilities
20 Hardware HP Color Laserjet 4730 Mfp Version Details Vulnerabilities
21 Hardware HP Color Laserjet 5500 Version Details Vulnerabilities
22 Hardware HP Color Laserjet 5550 Version Details Vulnerabilities
23 Hardware HP Color Laserjet 8500 Version Details Vulnerabilities
24 Hardware HP Color Laserjet 8550 Version Details Vulnerabilities
25 Hardware HP Color Laserjet 9500 Version Details Vulnerabilities
26 Hardware HP Color Laserjet 9500 Mfp Version Details Vulnerabilities
27 Hardware HP Color Laserjet 9500mfp 20070719 05.011.2 Version Details Vulnerabilities
28 Hardware HP Color Mfp Cm8050 - - Edgeline Version Details Vulnerabilities
29 Hardware HP Color Mfp Cm8060 - - Edgeline Version Details Vulnerabilities
30 Hardware HP Digital Senders Version Details Vulnerabilities
31 Hardware HP Edgeline Printers Version Details Vulnerabilities
32 Hardware HP Laserjet 1000 Version Details Vulnerabilities
33 Hardware HP Laserjet 1005 Version Details Vulnerabilities
34 Hardware HP Laserjet 1010 Version Details Vulnerabilities
35 Hardware HP Laserjet 1012 Version Details Vulnerabilities
36 Hardware HP Laserjet 1015 Version Details Vulnerabilities
37 Hardware HP Laserjet 1018 Version Details Vulnerabilities
38 Hardware HP Laserjet 1018s Version Details Vulnerabilities
39 Hardware HP Laserjet 1020 Version Details Vulnerabilities
40 Hardware HP Laserjet 1020 Plus Version Details Vulnerabilities
41 Hardware HP Laserjet 1022 Version Details Vulnerabilities
42 Hardware HP Laserjet 1022n Version Details Vulnerabilities
43 Hardware HP Laserjet 1022nw Version Details Vulnerabilities
44 Hardware HP Laserjet 1100 Version Details Vulnerabilities
45 Hardware HP Laserjet 1150 Version Details Vulnerabilities
46 Hardware HP Laserjet 1160 Version Details Vulnerabilities
47 Hardware HP Laserjet 1200 Version Details Vulnerabilities
48 Hardware HP Laserjet 1300 Version Details Vulnerabilities
49 Hardware HP Laserjet 1320 Version Details Vulnerabilities
50 Hardware HP Laserjet 2 Version Details Vulnerabilities
51 Hardware HP Laserjet 2000 Version Details Vulnerabilities
52 Hardware HP Laserjet 2100 Version Details Vulnerabilities
53 Hardware HP Laserjet 2200 Version Details Vulnerabilities
54 Hardware HP Laserjet 2200dtn Version Details Vulnerabilities
55 Hardware HP Laserjet 2300 Version Details Vulnerabilities
56 Hardware HP Laserjet 2300dn Version Details Vulnerabilities
57 Hardware HP Laserjet 2400 Version Details Vulnerabilities
58 Hardware HP Laserjet 2410 20070410 08.112.3 Version Details Vulnerabilities
59 Hardware HP Laserjet 2420 20070410 08.112.3 Version Details Vulnerabilities
60 Hardware HP Laserjet 2430 Version Details Vulnerabilities
61 Hardware HP Laserjet 2430 20070410 08.112.3 Version Details Vulnerabilities
62 Hardware HP Laserjet 2500 Version Details Vulnerabilities
63 Hardware HP Laserjet 2500c Version Details Vulnerabilities
64 Hardware HP Laserjet 2600c Version Details Vulnerabilities
65 Hardware HP Laserjet 2600n Version Details Vulnerabilities
66 Hardware HP Laserjet 3000 Version Details Vulnerabilities
67 Hardware HP Laserjet 3700 Version Details Vulnerabilities
68 Hardware HP Laserjet 4 Version Details Vulnerabilities
69 Hardware HP Laserjet 4 Plus/m Plus Version Details Vulnerabilities
70 Hardware HP Laserjet 4/4m Version Details Vulnerabilities
71 Hardware HP Laserjet 4000 Version Details Vulnerabilities
72 Hardware HP Laserjet 4000n Version Details Vulnerabilities
73 Hardware HP Laserjet 4050 Version Details Vulnerabilities
74 Hardware HP Laserjet 4100 Version Details Vulnerabilities
75 Hardware HP Laserjet 4100 Mfp Version Details Vulnerabilities
76 Hardware HP Laserjet 4100mfp Version Details Vulnerabilities
77 Hardware HP Laserjet 4200 Version Details Vulnerabilities
78 Hardware HP Laserjet 4200dtn Version Details Vulnerabilities
79 Hardware HP Laserjet 4200ln Version Details Vulnerabilities
80 Hardware HP Laserjet 4240 Version Details Vulnerabilities
81 Hardware HP Laserjet 4240n Version Details Vulnerabilities
82 Hardware HP Laserjet 4250 Version Details Vulnerabilities
83 Hardware HP Laserjet 4250 20080319 08.015.0 Version Details Vulnerabilities
84 Hardware HP Laserjet 4300 Version Details Vulnerabilities
85 Hardware HP Laserjet 4345 Mfp Version Details Vulnerabilities
86 Hardware HP Laserjet 4345mfp 20081211 09.131.1 Version Details Vulnerabilities
87 Hardware HP Laserjet 4350 Version Details Vulnerabilities
88 Hardware HP Laserjet 4350 20080319 08.015.0 Version Details Vulnerabilities
89 Hardware HP Laserjet 4350dtn Version Details Vulnerabilities
90 Hardware HP Laserjet 4650dn Version Details Vulnerabilities
91 Hardware HP Laserjet 4l/ml Version Details Vulnerabilities
92 Hardware HP Laserjet 4m Plus Version Details Vulnerabilities
93 Hardware HP Laserjet 4p/mp Version Details Vulnerabilities
94 Hardware HP Laserjet 4si Version Details Vulnerabilities
95 Hardware HP Laserjet 4v/mv Version Details Vulnerabilities
96 Hardware HP Laserjet 5 Version Details Vulnerabilities
97 Hardware HP Laserjet 5/m/n Version Details Vulnerabilities
98 Hardware HP Laserjet 500 Plus Version Details Vulnerabilities
99 Hardware HP Laserjet 5000 Version Details Vulnerabilities
100 Hardware HP Laserjet 5000 R.25.15 Version Details Vulnerabilities
101 Hardware HP Laserjet 5000 R.25.47 Version Details Vulnerabilities
102 Hardware HP Laserjet 5100 Version Details Vulnerabilities
103 Hardware HP Laserjet 5100 V.29.12 Version Details Vulnerabilities
104 Hardware HP Laserjet 5100dtn Version Details Vulnerabilities
105 Hardware HP Laserjet 5200 Version Details Vulnerabilities
106 Hardware HP Laserjet 5l Version Details Vulnerabilities
107 Hardware HP Laserjet 5m Version Details Vulnerabilities
108 Hardware HP Laserjet 5p/mp Version Details Vulnerabilities
109 Hardware HP Laserjet 5si Version Details Vulnerabilities
110 Hardware HP Laserjet 8000 Version Details Vulnerabilities
111 Hardware HP Laserjet 8100 Version Details Vulnerabilities
112 Hardware HP Laserjet 8150 Version Details Vulnerabilities
113 Hardware HP Laserjet 8150dn Version Details Vulnerabilities
114 Hardware HP Laserjet 9000 Version Details Vulnerabilities
115 Hardware HP Laserjet 9000 Mfp Version Details Vulnerabilities
116 Hardware HP Laserjet 9000mfp Version Details Vulnerabilities
117 Hardware HP Laserjet 9040 Version Details Vulnerabilities
118 Hardware HP Laserjet 9040 20080204 08.110.0 Version Details Vulnerabilities
119 Hardware HP Laserjet 9040mfp Version Details Vulnerabilities
120 Hardware HP Laserjet 9040mfp 20080204 08.110.0 Version Details Vulnerabilities
121 Hardware HP Laserjet 9050 Version Details Vulnerabilities
122 Hardware HP Laserjet 9050 20080204 08.110.0 Version Details Vulnerabilities
123 Hardware HP Laserjet 9050 Mfp Version Details Vulnerabilities
124 Hardware HP Laserjet 9050mfp Version Details Vulnerabilities
125 Hardware HP Laserjet 9050mfp 20080204 08.110.0 Version Details Vulnerabilities
126 Hardware HP Laserjet 9055 Version Details Vulnerabilities
127 Hardware HP Laserjet 9065 Version Details Vulnerabilities
128 Hardware HP Laserjet 9500 Version Details Vulnerabilities
129 Hardware HP Laserjet 9500mfp Version Details Vulnerabilities
130 Hardware HP Laserjet Ii Version Details Vulnerabilities
131 Hardware HP Laserjet Iid Version Details Vulnerabilities
132 Hardware HP Laserjet Iii Version Details Vulnerabilities
133 Hardware HP Laserjet Iiid Version Details Vulnerabilities
134 Hardware HP Laserjet Iiip Version Details Vulnerabilities
135 Hardware HP Laserjet Iiisi Version Details Vulnerabilities
136 Hardware HP Laserjet Iip Version Details Vulnerabilities
137 Hardware HP Laserjet Iip Plus Version Details Vulnerabilities
138 Hardware HP Laserjet M1522n Mfp Version Details Vulnerabilities
139 Hardware HP Laserjet M3027 Mfp Version Details Vulnerabilities
140 Hardware HP Laserjet M3035 Mfp Version Details Vulnerabilities
141 Hardware HP Laserjet M4345 Mfp Version Details Vulnerabilities
142 Hardware HP Laserjet M5025 Mfp Version Details Vulnerabilities
143 Hardware HP Laserjet M5035 Mfp Version Details Vulnerabilities
144 Hardware HP Laserjet P1000 Version Details Vulnerabilities
145 Hardware HP Laserjet P1005 Version Details Vulnerabilities
146 Hardware HP Laserjet P1006 Version Details Vulnerabilities
147 Hardware HP Laserjet P1007 Version Details Vulnerabilities
148 Hardware HP Laserjet P1008 Version Details Vulnerabilities
149 Hardware HP Laserjet P1009 Version Details Vulnerabilities
150 Hardware HP Laserjet P1500 Version Details Vulnerabilities
151 Hardware HP Laserjet P1505 Version Details Vulnerabilities
152 Hardware HP Laserjet P1505n Version Details Vulnerabilities
153 Hardware HP Laserjet P2000 Version Details Vulnerabilities
154 Hardware HP Laserjet P2010 Version Details Vulnerabilities
155 Hardware HP Laserjet P2015 Version Details Vulnerabilities
156 Hardware HP Laserjet P2030 Version Details Vulnerabilities
157 Hardware HP Laserjet P2050 Version Details Vulnerabilities
158 Hardware HP Laserjet P3000 Version Details Vulnerabilities
159 Hardware HP Laserjet P3005 Version Details Vulnerabilities
160 Hardware HP Laserjet P4010 Version Details Vulnerabilities
161 Hardware HP Laserjet P4014 Version Details Vulnerabilities
162 Hardware HP Laserjet P4015 Version Details Vulnerabilities
163 Hardware HP Laserjet P4500 Version Details Vulnerabilities
164 Hardware HP Laserjet P4510 Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor Product Vulnerable Versions
HP 8100c Digital Sender 1
HP 9100c Digital Sender 1
HP 9200c Digital Sender 1
HP 9250c Digital Sender 1
HP Color Laserjet 1
HP Color Laserjet 1500 1
HP Color Laserjet 2500 1
HP Color Laserjet 2500l 1
HP Color Laserjet 2500lse 1
HP Color Laserjet 2500n 1
HP Color Laserjet 2500tn 1
HP Color Laserjet 2605dtn 1
HP Color Laserjet 4370mfp 1
HP Color Laserjet 4600 1
HP Color Laserjet 4600dn 1
HP Color Laserjet 4600dtn 1
HP Color Laserjet 4600hdn 1
HP Color Laserjet 4650 1
HP Color Laserjet 4700 1
HP Color Laserjet 4730 Mfp 1
HP Color Laserjet 5500 1
HP Color Laserjet 5550 1
HP Color Laserjet 8500 1
HP Color Laserjet 8550 1
HP Color Laserjet 9500 1
HP Color Laserjet 9500 Mfp 1
HP Color Laserjet 9500mfp 1
HP Color Mfp Cm8050 1
HP Color Mfp Cm8060 1
HP Digital Senders 1
HP Edgeline Printers 1
HP Laserjet 1000 1
HP Laserjet 1005 1
HP Laserjet 1010 1
HP Laserjet 1012 1
HP Laserjet 1015 1
HP Laserjet 1018 1
HP Laserjet 1018s 1
HP Laserjet 1020 1
HP Laserjet 1020 Plus 1
HP Laserjet 1022 1
HP Laserjet 1022n 1
HP Laserjet 1022nw 1
HP Laserjet 1100 1
HP Laserjet 1150 1
HP Laserjet 1160 1
HP Laserjet 1200 1
HP Laserjet 1300 1
HP Laserjet 1320 1
HP Laserjet 2 1
HP Laserjet 2000 1
HP Laserjet 2100 1
HP Laserjet 2200 1
HP Laserjet 2200dtn 1
HP Laserjet 2300 1
HP Laserjet 2300dn 1
HP Laserjet 2400 1
HP Laserjet 2410 1
HP Laserjet 2420 1
HP Laserjet 2430 2
HP Laserjet 2500 1
HP Laserjet 2500c 1
HP Laserjet 2600c 1
HP Laserjet 2600n 1
HP Laserjet 3000 1
HP Laserjet 3700 1
HP Laserjet 4 1
HP Laserjet 4 Plus/m Plus 1
HP Laserjet 4/4m 1
HP Laserjet 4000 1
HP Laserjet 4000n 1
HP Laserjet 4050 1
HP Laserjet 4100 1
HP Laserjet 4100 Mfp 1
HP Laserjet 4100mfp 1
HP Laserjet 4200 1
HP Laserjet 4200dtn 1
HP Laserjet 4200ln 1
HP Laserjet 4240 1
HP Laserjet 4240n 1
HP Laserjet 4250 2
HP Laserjet 4300 1
HP Laserjet 4345 Mfp 1
HP Laserjet 4345mfp 1
HP Laserjet 4350 2
HP Laserjet 4350dtn 1
HP Laserjet 4650dn 1
HP Laserjet 4l/ml 1
HP Laserjet 4m Plus 1
HP Laserjet 4p/mp 1
HP Laserjet 4si 1
HP Laserjet 4v/mv 1
HP Laserjet 5 1
HP Laserjet 5/m/n 1
HP Laserjet 500 Plus 1
HP Laserjet 5000 3
HP Laserjet 5100 2
HP Laserjet 5100dtn 1
HP Laserjet 5200 1
HP Laserjet 5l 1
HP Laserjet 5m 1
HP Laserjet 5p/mp 1
HP Laserjet 5si 1
HP Laserjet 8000 1
HP Laserjet 8100 1
HP Laserjet 8150 1
HP Laserjet 8150dn 1
HP Laserjet 9000 1
HP Laserjet 9000 Mfp 1
HP Laserjet 9000mfp 1
HP Laserjet 9040 2
HP Laserjet 9040mfp 2
HP Laserjet 9050 2
HP Laserjet 9050 Mfp 1
HP Laserjet 9050mfp 2
HP Laserjet 9055 1
HP Laserjet 9065 1
HP Laserjet 9500 1
HP Laserjet 9500mfp 1
HP Laserjet Ii 1
HP Laserjet Iid 1
HP Laserjet Iii 1
HP Laserjet Iiid 1
HP Laserjet Iiip 1
HP Laserjet Iiisi 1
HP Laserjet Iip 1
HP Laserjet Iip Plus 1
HP Laserjet M1522n Mfp 1
HP Laserjet M3027 Mfp 1
HP Laserjet M3035 Mfp 1
HP Laserjet M4345 Mfp 1
HP Laserjet M5025 Mfp 1
HP Laserjet M5035 Mfp 1
HP Laserjet P1000 1
HP Laserjet P1005 1
HP Laserjet P1006 1
HP Laserjet P1007 1
HP Laserjet P1008 1
HP Laserjet P1009 1
HP Laserjet P1500 1
HP Laserjet P1505 1
HP Laserjet P1505n 1
HP Laserjet P2000 1
HP Laserjet P2010 1
HP Laserjet P2015 1
HP Laserjet P2030 1
HP Laserjet P2050 1
HP Laserjet P3000 1
HP Laserjet P3005 1
HP Laserjet P4010 1
HP Laserjet P4014 1
HP Laserjet P4015 1
HP Laserjet P4500 1
HP Laserjet P4510 1

- References For CVE-2009-0941

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566
HP HPSN-2009-001
http://www.vupen.com/english/advisories/2009/0754
VUPEN ADV-2009-0754
http://www.securityfocus.com/archive/1/archive/1/501884/100/0/threaded
BUGTRAQ 20090316 HP Laserjet multiple models web management CSRF vulnerability & insecure default configuration
http://www.louhinetworks.fi/advisory/HP_20090317.txt

- Metasploit Modules Related To CVE-2009-0941

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)


CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.