Approved changes feed: RSS · Atom

cpe:2.3:h:hp:color_laserjet_cp3505:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorHp (4e2366e1-58ef-5a93-a9f3-b1274f17de1d)
ProductColor Laserjet Cp3505 (51a193a2-a283-535d-a0b8-3f993b39bd9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4161 vulnerable 2026-06-08 04:59:29.738953 Details available
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.
Published: 2011-12-01T21:00:00.000Z
Updated: 2024-08-07T00:01:50.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2684 vulnerable 2026-06-08 04:51:29.976356 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script.
Published: 2009-10-13T10:00:00.000Z
Updated: 2024-08-07T05:59:56.763Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.