Vulnerability Details CVE-2004-1856
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.217
EPSS Ranking 95.5%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=108016019623003&w=2
- http://sh0dan.org/files/hpjadmadv.txt
- http://www.securityfocus.com/advisories/6492
- http://www.securityfocus.com/bid/9971
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15605
- http://marc.info/?l=bugtraq&m=108016019623003&w=2
- http://sh0dan.org/files/hpjadmadv.txt
- http://www.securityfocus.com/advisories/6492
- http://www.securityfocus.com/bid/9971
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15605
Products affected by CVE-2004-1856
-
cpe:2.3:a:hp:web_jetadmin:7.5.2546