Vulnerability in Hp Color Laserjet 3000
CVE-2012-5221
Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.
EPSS: 0.039 (89.1th percentile) — read the EPSS interpretation.
Affected products
- Hp Color_laserjet_3000 — versions q7534a
- Hp Color_laserjet_3800 — versions q5981a
- Hp Color_laserjet_4700 — versions q7492a
- Hp Color_laserjet_4730_mfp — versions cb480a
- Hp Color_laserjet_5550 — versions q3714a
- Hp Color_laserjet_9500_mfp — versions c8549a
- Hp Color_laserjet_cm6030_mfp — versions ce664a
- Hp Color_laserjet_cm6040_mfp — versions q3939a
- Hp Color_laserjet_cp3505 — versions cb442a
- Hp Color_laserjet_cp3525 — versions cc469a
Public proof-of-concept exploits
References
- hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (x_refsource_IDEFENSE, third-party-advisory)
Frequently asked questions
- What is CVE-2012-5221?
- CVE-2012-5221 is a vulnerability in Hp Color Laserjet 3000. Published 2013-04-29.
- Is CVE-2012-5221 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.