Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2011-4161 Details

Description

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449	CVE	Vendor Advisory
http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112	CVE
http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say	CVE
http://secunia.com/advisories/47063	CVE
https://lists.immunityinc.com/pipermail/dailydave/2011-November/000378.html	CVE
http://www.kb.cert.org/vuls/id/717921	CVE	US Government Resource
http://www.securityfocus.com/bid/51324	CVE
http://www.securitytracker.com/id?1026357	CVE
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449	[email protected]	Vendor Advisory
http://isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112	[email protected]
http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say	[email protected]
http://secunia.com/advisories/47063	[email protected]
https://lists.immunityinc.com/pipermail/dailydave/2011-November/000378.html	[email protected]
http://www.kb.cert.org/vuls/id/717921	[email protected]	US Government Resource
http://www.securityfocus.com/bid/51324	[email protected]
http://www.securitytracker.com/id?1026357	[email protected]

see all 16 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-264	Permissions, Privileges, and Access Controls	[email protected]

Affected Products

Product	Versions
hp color laserjet 3000	All versions
CPE cpe:2.3:h:hp:color_laserjet_3000:::::::: Remediation No remediation found in references.
hp color laserjet 3800	All versions
CPE cpe:2.3:h:hp:color_laserjet_3800:::::::: Remediation No remediation found in references.
hp color laserjet 4700	All versions
CPE cpe:2.3:h:hp:color_laserjet_4700:::::::: Remediation No remediation found in references.
hp color laserjet 4730	mfp
CPE cpe:2.3:h:hp:color_laserjet_4730:mfp:::::::* Remediation No remediation found in references.
hp color laserjet 4730 mfp	All versions
CPE cpe:2.3:h:hp:color_laserjet_4730_mfp:::::::: Remediation No remediation found in references.
hp color laserjet 5550	All versions
CPE cpe:2.3:h:hp:color_laserjet_5550:::::::: Remediation No remediation found in references.
hp color laserjet 9500	All versions
CPE cpe:2.3:h:hp:color_laserjet_9500:::::::: Remediation No remediation found in references.
hp color laserjet cm3530	All versions
CPE cpe:2.3:h:hp:color_laserjet_cm3530:::::::: Remediation No remediation found in references.
hp color laserjet cm4540	mfp
CPE cpe:2.3:h:hp:color_laserjet_cm4540:mfp:::::::* Remediation No remediation found in references.
hp color laserjet cm4730	mfp
CPE cpe:2.3:h:hp:color_laserjet_cm4730:mfp:::::::* Remediation No remediation found in references.
hp color laserjet cm6030	All versions
CPE cpe:2.3:h:hp:color_laserjet_cm6030:::::::: Remediation No remediation found in references.
hp color laserjet cm6040	All versions
CPE cpe:2.3:h:hp:color_laserjet_cm6040:::::::: Remediation No remediation found in references.
hp color laserjet cp3505	All versions
CPE cpe:2.3:h:hp:color_laserjet_cp3505:::::::: Remediation No remediation found in references.
hp color laserjet cp3525	All versions
CPE cpe:2.3:h:hp:color_laserjet_cp3525:::::::: Remediation No remediation found in references.
hp color laserjet cp4005	All versions
CPE cpe:2.3:h:hp:color_laserjet_cp4005:::::::: Remediation No remediation found in references.
hp color laserjet cp5525	All versions
CPE cpe:2.3:h:hp:color_laserjet_cp5525:::::::: Remediation No remediation found in references.
hp color laserjet cp6015	All versions
CPE cpe:2.3:h:hp:color_laserjet_cp6015:::::::: Remediation No remediation found in references.
hp color laserjet enterprise cp4520	All versions
CPE cpe:2.3:h:hp:color_laserjet_enterprise_cp4520:::::::: Remediation No remediation found in references.
hp color laserjet enterprise cp4525	All versions
CPE cpe:2.3:h:hp:color_laserjet_enterprise_cp4525:::::::: Remediation No remediation found in references.
hp color mfp cm8060	All versions
CPE cpe:2.3:h:hp:color_mfp_cm8060:-:-:edgeline:::::* Remediation No remediation found in references.
hp digital sender 9200c	All versions
CPE cpe:2.3:h:hp:digital_sender_9200c:::::::: Remediation No remediation found in references.
hp digital sender 9250c	All versions
CPE cpe:2.3:h:hp:digital_sender_9250c:::::::: Remediation No remediation found in references.
hp laserjet 4240	All versions
CPE cpe:2.3:h:hp:laserjet_4240:::::::: Remediation No remediation found in references.
hp laserjet 4250	All versions
CPE cpe:2.3:h:hp:laserjet_4250:::::::: Remediation No remediation found in references.
hp laserjet 4345 mfp	All versions
CPE cpe:2.3:h:hp:laserjet_4345_mfp:::::::: Remediation No remediation found in references.
hp laserjet 4350	All versions
CPE cpe:2.3:h:hp:laserjet_4350:::::::: Remediation No remediation found in references.
hp laserjet 5200	All versions
CPE cpe:2.3:h:hp:laserjet_5200:::::::: Remediation No remediation found in references.
hp laserjet 9040	All versions
CPE cpe:2.3:h:hp:laserjet_9040:::::::: Remediation No remediation found in references.
hp laserjet 9050	All versions
CPE cpe:2.3:h:hp:laserjet_9050:::::::: Remediation No remediation found in references.
hp laserjet enterprise 500 color	m551
CPE cpe:2.3:h:hp:laserjet_enterprise_500_color:m551:::::::* Remediation No remediation found in references.
hp laserjet enterprise 600	m601 m602 m603
CPE cpe:2.3:h:hp:laserjet_enterprise_600:m601:::::::* cpe:2.3:h:hp:laserjet_enterprise_600:m602:::::::* cpe:2.3:h:hp:laserjet_enterprise_600:m603:::::::* Remediation No remediation found in references.
hp laserjet enterprise m4555	mfp
CPE cpe:2.3:h:hp:laserjet_enterprise_m4555:mfp:::::::* Remediation No remediation found in references.
hp laserjet enterprise p3015	All versions
CPE cpe:2.3:h:hp:laserjet_enterprise_p3015:::::::: Remediation No remediation found in references.
hp laserjet m3035	All versions
CPE cpe:2.3:h:hp:laserjet_m3035:::::::: Remediation No remediation found in references.
hp laserjet m5035	All versions
CPE cpe:2.3:h:hp:laserjet_m5035:::::::: Remediation No remediation found in references.
hp laserjet m9040	All versions
CPE cpe:2.3:h:hp:laserjet_m9040:::::::: Remediation No remediation found in references.
hp laserjet m9050	All versions
CPE cpe:2.3:h:hp:laserjet_m9050:::::::: Remediation No remediation found in references.
hp laserjet p3005	All versions
CPE cpe:2.3:h:hp:laserjet_p3005:::::::: Remediation No remediation found in references.
hp laserjet p4014	All versions
CPE cpe:2.3:h:hp:laserjet_p4014:::::::: Remediation No remediation found in references.
hp laserjet p4015	All versions
CPE cpe:2.3:h:hp:laserjet_p4015:::::::: Remediation No remediation found in references.
hp laserjet p4515	All versions
CPE cpe:2.3:h:hp:laserjet_p4515:::::::: Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Dec 2, 2011	Initial Analysis	[email protected]

CVE-2011-4161 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation