Approved changes feed: RSS · Atom

cpe:2.3:h:hp:color_laserjet_4650:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorHp (4e2366e1-58ef-5a93-a9f3-b1274f17de1d)
ProductColor Laserjet 4650 (c65181fb-d1af-58aa-b1c6-7ad5133db76c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0941 vulnerable 2026-06-08 04:51:12.386173 Details available
The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.
Published: 2009-03-18T20:35:00.000Z
Updated: 2024-08-07T04:57:17.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0940 vulnerable 2026-06-08 04:51:12.300260 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.
Published: 2009-03-18T20:35:00.000Z
Updated: 2024-08-07T04:57:17.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0161 vulnerable 2026-06-08 04:49:31.569576 Details available
The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.
Published: 2007-01-10T00:00:00.000Z
Updated: 2024-08-07T12:12:17.406Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.