GCVE - cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*

part: h version: * update: *

Vendor	Hp (`4e2366e1-58ef-5a93-a9f3-b1274f17de1d`)
Product	Color Laserjet 4600 (`5156cb17-d387-5c58-bee9-301a712cccee`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-0941`	vulnerable	2026-06-08 04:51:12.386094	Details available The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access. Published: 2009-03-18T20:35:00.000Z Updated: 2024-08-07T04:57:17.352Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/0754 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566 http://www.securityfocus.com/archive/1/501884/100/0/threaded http://www.louhinetworks.fi/advisory/HP_20090317.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0940`	vulnerable	2026-06-08 04:51:12.297025	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config. Published: 2009-03-18T20:35:00.000Z Updated: 2024-08-07T04:57:17.078Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/0754 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566 http://osvdb.org/52848 http://www.securityfocus.com/bid/34143 http://osvdb.org/52849	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1654`	vulnerable	2026-06-08 04:48:57.719641	Details available Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225. Published: 2006-04-06T10:00:00.000Z Updated: 2024-08-07T17:19:49.234Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/429984/100/0/threaded http://www.osvdb.org/24396 http://www.securityfocus.com/bid/17367 http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0085.html https://exchange.xforce.ibmcloud.com/vulnerabilities/25627	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2439`	vulnerable	2026-06-08 04:48:09.726099	Details available The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware. Published: 2005-08-20T04:00:00.000Z Updated: 2024-08-08T01:29:12.776Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/17634 http://securitytracker.com/id?1011671 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085 http://www.securityfocus.com/bid/11297	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.