CVE-2004-1856
published 2004-03-24CVE-2004-1856: devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer…
PriorityP345medium5CVSS 2.0
AVNACLAuNCNIPAN
EXPLOIT
EPSS
29.53%
98.0th percentile
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hp | web_jetadmin | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=108016019623003&w=2http://sh0dan.org/files/hpjadmadv.txthttp://www.securityfocus.com/advisories/6492http://www.securityfocus.com/bid/9971https://exchange.xforce.ibmcloud.com/vulnerabilities/15605http://marc.info/?l=bugtraq&m=108016019623003&w=2http://sh0dan.org/files/hpjadmadv.txthttp://www.securityfocus.com/advisories/6492http://www.securityfocus.com/bid/9971https://exchange.xforce.ibmcloud.com/vulnerabilities/15605
2004-03-24
Published