Information disclosure in HP Envy 100 D410

CVE-2011-1531

The webscan component in the Embedded Web Server (EWS) on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to read documents on the scan surface via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.020 (79.2th percentile) — read the EPSS interpretation.

Affected products

Hp Envy_100_d410
Hp Photosmart_b110
Hp Photosmart_d110
Hp Photosmart_plus_b210
Hp Photosmart_premium_c310
Hp Photosmart_premium_c510
Hp Photosmart_premium_fax_all-in-one
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

hp-security-alert@hp.com (x_refsource_SREASON, third-party-advisory)
hp-security-alert@hp.com (vdb-entry, x_refsource_VUPEN)
hp-security-alert@hp.com (x_refsource_SECUNIA, third-party-advisory)
hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)
hp-security-alert@hp.com (vdb-entry, x_refsource_XF)
hp-security-alert@hp.com (vdb-entry, x_refsource_BID)