virus logo Intrusion Prevention

HP.LaserJet.Connect.Arbitrary.File.Access

description-logoDescription

This indicates an attack attempt against a remote File Access vulnerability in HP Laser Jet.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. It allows a remote attacker to access arbitrary file via sending a crafted Connect request.

affected-products-logoAffected Products

All versions

Impact logoImpact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

recomended-action-logoRecommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2020-11-09 16.958 Name:HP.
LaserJet.
Connect:HP.
LaserJet.
Connect.
Arbitrary.
File.
Access
2019-02-01 14.540 Name:HPLaserJet.
Connect:HP.
LaserJet.
Connect
ID 31507
Created Apr 11, 2012
Updated Jul 11, 2022
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
Default Action drop
Active
Affected OS Windows
Affected App HP