CVE-2013-4828

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-4828
HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via unspecified vectors.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:hp:color_laserjet_cm4540:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cm4540f:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_cm4540fskm:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_m575dn:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_m575f:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_m775dn:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_m775f:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_m775z:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:color_laserjet_m775z\+:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_enterprise_color_flow_m575c:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_flow_m525c:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m4555:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m4555f:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m4555fskm:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m4555h:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m525dn:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m525f:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m725dn:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m725f:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m725z:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:laserjet_m725z\+:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:scanjet_enterprise_8500fn1:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2013-10-04 10:44

Updated : 2024-02-04 18:16

NVD link : CVE-2013-4828

Mitre link : CVE-2013-4828

CVE.ORG link : CVE-2013-4828

JSON object : View

Products Affected

hp

  • laserjet_m4555
  • laserjet_m4555h
  • laserjet_m525f
  • laserjet_m4555fskm
  • laserjet_m725f
  • laserjet_flow_m525c
  • color_laserjet_m775dn
  • color_laserjet_cm4540
  • color_laserjet_m775z
  • laserjet_m4555f
  • laserjet_enterprise_color_flow_m575c
  • color_laserjet_m575dn
  • laserjet_m725z\+
  • laserjet_m525dn
  • scanjet_enterprise_8500fn1
  • laserjet_m725z
  • color_laserjet_cm4540f
  • color_laserjet_cm4540fskm
  • color_laserjet_m775z\+
  • color_laserjet_m775f
  • color_laserjet_m575f
  • laserjet_m725dn
CWE
CWE-310

Cryptographic Issues