« Volver al listado

CVE-2008-4419

Estado: ModificadaAlta (7.8)—

Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color LaserJet 4730mfp before firmware 46.200.9; LaserJet 2410, LaserJet 2420, and LaserJet 2430 before firmware 20080819 SPCL112A; LaserJet 4250 and LaserJet 4350 before firmware 20080819 SPCL015A; and LaserJet 9040 and LaserJet 9050 before firmware 20080819 SPCL110A allows remote attackers to read arbitrary files via directory traversal sequences in the URI.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (13)

HP — 9200c Digital SenderHP — Color Laserjet 4370mfpHP — Color Laserjet 9500mfpHP — Laserjet 2410HP — Laserjet 2420HP — Laserjet 2430HP — Laserjet 4250HP — Laserjet 4345mfpHP — Laserjet 4350HP — Laserjet 9040HP — Laserjet 9040mfpHP — Laserjet 9050HP — Laserjet 9050mfp

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-4419",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-02-05T00:30:00.203",
  "references": [
    {
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/33779",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/500657/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/33611",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1021687",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0341",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/33779",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/500657/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/33611",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1021687",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0341",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color LaserJet 4730mfp before firmware 46.200.9; LaserJet 2410, LaserJet 2420, and LaserJet 2430 before firmware 20080819 SPCL112A; LaserJet 4250 and LaserJet 4350 before firmware 20080819 SPCL015A; and LaserJet 9040 and LaserJet 9050 before firmware 20080819 SPCL110A allows remote attackers to read arbitrary files via directory traversal sequences in the URI."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en la interfaz de administración Web HP JetDirect en el servidor web empotrado HP-ChaiSOE v1.0 en las LaserJet 9040mfp, LaserJet 9050mfp y Color LaserJet 9500mfp anteriores al software empotrado 08.110.9; LaserJet 4345mfp y 9200C Digital Sender anteriores al software empotrado 09.120.9; Color LaserJet 4730mfp anterior al software empotrado 46.200.9; LaserJet 2410, LaserJet 2420 y LaserJet 2430 anterior al software empotrado 20080819 SPCL112A; LaserJet 4250 y LaserJet 4350 anterior al software empotrado 20080819 SPCL015A; y LaserJet 9040 y LaserJet 9050 anterior al software empotrado 20080819 SPCL110A; permite a atacantes remotos leer ficheros arbitrario a través de secuencias de salto de directorio en el URI."
    }
  ],
  "lastModified": "2026-06-16T22:57:46.837",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:9200c_digital_sender:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2594CCB-56FF-48C0-BF61-889FDD6C68CC",
              "versionEndIncluding": "20081211_09.131.1"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_4370mfp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "996C40A5-CD3F-4ACD-976E-8CFCD1DCCCB2",
              "versionEndIncluding": "20081211_46.211.2"
            },
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_9500mfp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6447E7F-F306-4816-B819-53D62D95DD55",
              "versionEndIncluding": "20070719_05.011.2"
            },
            {
              "criteria": "cpe:2.3:h:hp:laserjet_2410:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72129DA7-5E88-4EC5-A9FB-DE6EBA3B9A84",
              "versionEndIncluding": "20070410_08.112.3"
            },
            {
              "criteria": "cpe:2.3:h:hp:laserjet_2420:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54D703D0-E487-4E4C-BFA1-FCD4373DC9FC",
              "versionEndIncluding": "20070410_08.112.3"
            },
            {
              "criteria": "cpe:2.3:h:hp:laserjet_2430:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7135DAB9-491F-4BD1-9E6A-EA488F2BA4F0",
              "versionEndIncluding": "20070410_08.112.3"
            },
            {
              "criteria": "cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA9F39FD-7909-49D0-8723-B5FD3291680E",
              "versionEndIncluding": "20080319_08.015.0"
            },
            {
              "criteria": "cpe:2.3:h:hp:laserjet_4345mfp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F08C1653-F7B8-4092-9149-1EE8EDBB79C4",
              "versionEndIncluding": "20081211_09.131.1"
            },
            {
              "criteria": "cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "543D9E70-DAC8-4A5F-8E51-8A3176C82A33",
              "versionEndIncluding": "20080319_08.015.0"
            },
            {
              "criteria": "cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "96E54FBF-5BC1-4159-8B5A-4DDD6B54B173",
              "versionEndIncluding": "20080204_08.110.0"
            },
            {
              "criteria": "cpe:2.3:h:hp:laserjet_9040mfp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1E305FE-BCA6-4F4A-B7E7-51DB5A428B3F",
              "versionEndIncluding": "20080204_08.110.0"
            },
            {
              "criteria": "cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCCD098A-6089-4E21-A791-832F0D65798A",
              "versionEndIncluding": "20080204_08.110.0"
            },
            {
              "criteria": "cpe:2.3:h:hp:laserjet_9050mfp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FC52430-4FAC-458C-8391-FE0997C6C596",
              "versionEndIncluding": "20080204_08.110.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}