CVE-2009-0940 - CVE House
Back to Database
Status published Medium CVE-2009-0940

Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded...

Vulnerability Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0940

Credits & Attribution

No credits recorded in the NVD database.

References

More from hp

View All →
CVE-2022-48311
**UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet...
Unknown 0
CVE-2022-23456
Potential arbitrary file deletion vulnerability has been identified in HP...
Medium 5.5
CVE-2020-15596
The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on...
Medium 6.7
CVE-2019-19539
An issue was discovered in Idelji Web ViewPoint H01ABO-H01BY and...
Medium 5.5
CVE-2019-16240
A Buffer Overflow and Information Disclosure issue exists in HP...
Critical 9.1

Affected Vendor

Affected Software

8100c digital sender, 9100c digital sender, 9200c digital sender, 9250c digital sender, color laserjet, color laserjet 1500, color laserjet 2500, color laserjet 2500l, color laserjet 2500lse, color laserjet 2500n, color laserjet 2500tn, color laserjet 2605dtn, color laserjet 4370mfp, color laserjet 4600, color laserjet 4600dn, color laserjet 4600dtn, color laserjet 4600hdn, color laserjet 4650, color laserjet 4700, color laserjet 4730 mfp, color laserjet 5500, color laserjet 5550, color laserjet 8500, color laserjet 8550, color laserjet 9500, color laserjet 9500 mfp, color laserjet 9500mfp, color mfp cm8050, color mfp cm8060, digital senders, edgeline printers, laserjet 1000, laserjet 1005, laserjet 1010, laserjet 1012, laserjet 1015, laserjet 1018, laserjet 1018s, laserjet 1020, laserjet 1020 plus, laserjet 1022, laserjet 1022n, laserjet 1022nw, laserjet 1100, laserjet 1150, laserjet 1160, laserjet 1200, laserjet 1300, laserjet 1320, laserjet 2, laserjet 2000, laserjet 2100, laserjet 2200, laserjet 2200dtn, laserjet 2300, laserjet 2300dn, laserjet 2400, laserjet 2410, laserjet 2420, laserjet 2430, laserjet 2500, laserjet 2500c, laserjet 2600c, laserjet 2600n, laserjet 3000, laserjet 3700, laserjet 4, laserjet 4\/4m, laserjet 4 plus\/m plus, laserjet 4000, laserjet 4000n, laserjet 4050, laserjet 4100, laserjet 4100 mfp, laserjet 4100mfp, laserjet 4200, laserjet 4200dtn, laserjet 4200ln, laserjet 4240, laserjet 4240n, laserjet 4250, laserjet 4300, laserjet 4345 mfp, laserjet 4345mfp, laserjet 4350, laserjet 4350dtn, laserjet 4650dn, laserjet 4l\/ml, laserjet 4m plus, laserjet 4p\/mp, laserjet 4si, laserjet 4v\/mv, laserjet 5, laserjet 5\/m\/n, laserjet 500 plus, laserjet 5000, laserjet 5100, laserjet 5100dtn, laserjet 5200, laserjet 5l, laserjet 5m, laserjet 5p\/mp, laserjet 5si, laserjet 8000, laserjet 8100, laserjet 8150, laserjet 8150dn, laserjet 9000, laserjet 9000 mfp, laserjet 9000mfp, laserjet 9040, laserjet 9040mfp, laserjet 9050, laserjet 9050 mfp, laserjet 9050mfp, laserjet 9055, laserjet 9065, laserjet 9500, laserjet 9500mfp, laserjet ii, laserjet iid, laserjet iii, laserjet iiid, laserjet iiip, laserjet iiisi, laserjet iip, laserjet iip plus, laserjet m1522n mfp, laserjet m3027 mfp, laserjet m3035 mfp, laserjet m4345 mfp, laserjet m5025 mfp, laserjet m5035 mfp, laserjet p1000, laserjet p1005, laserjet p1006, laserjet p1007, laserjet p1008, laserjet p1009, laserjet p1500, laserjet p1505, laserjet p1505n, laserjet p2000, laserjet p2010, laserjet p2015, laserjet p2030, laserjet p2050, laserjet p3000, laserjet p3005, laserjet p4010, laserjet p4014, laserjet p4015, laserjet p4500, laserjet p4510
Vulnerable Versions:
20081211_46.211.2, 20070719_05.011.2, 20070410_08.112.3, 20080319_08.015.0, 20081211_09.131.1, r.25.15, r.25.47, v.29.12, 20080204_08.110.0

Timeline

Official Publish: March 18th, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.