« Volver al listado

CVE-2001-1040

Estado: ModificadaMedia (6.4)—

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Jetadmin

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2001-1040",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2001-08-31T04:00:00.000",
  "references": [
    {
      "url": "http://www.securityfocus.com/archive/1/201224",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/3132",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/201224",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/3132",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password."
    }
  ],
  "lastModified": "2026-06-16T21:55:27.947",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:jetadmin:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "565A8753-31CC-4D4D-BF71-EB4C08A2D47E"
            },
            {
              "criteria": "cpe:2.3:a:hp:jetadmin:4.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30AAEB5E-184F-4DB4-B0A6-D770D3832B77"
            },
            {
              "criteria": "cpe:2.3:a:hp:jetadmin:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "012B7A13-0A21-4FCD-8B32-7302545885A9"
            },
            {
              "criteria": "cpe:2.3:a:hp:jetadmin:5.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30DA33FB-AFA3-4720-8108-E279D97BADC5"
            },
            {
              "criteria": "cpe:2.3:a:hp:jetadmin:5.5.177:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F6E0862-A565-4099-9EB7-D02AD6081811"
            },
            {
              "criteria": "cpe:2.3:a:hp:jetadmin:5.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE4F960E-F153-45DF-812F-47AA31C33E55"
            },
            {
              "criteria": "cpe:2.3:a:hp:jetadmin:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17A6954A-D8E0-4ADF-BB64-329D7589F38A"
            },
            {
              "criteria": "cpe:2.3:a:hp:jetadmin:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A5E2537-1E27-4962-BFC3-488FF3C2D305"
            },
            {
              "criteria": "cpe:2.3:a:hp:jetadmin:6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "467A92C4-1067-4158-8BA1-367495B1845C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}