CVEvulnerability

CVE-2012-5221

5.0 MEDIUM Published 2013-04-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-04-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.

Affected configurations

• hp color laserjet 3000 q7534a • hp color laserjet 3800 q5981a • hp color laserjet 4700 q7492a • hp color laserjet 4730 mfp cb480a • hp color laserjet 5550 q3714a • hp color laserjet 9500 mfp c8549a • hp color laserjet cm6030 mfp ce664a • hp color laserjet cm6040 mfp q3939a • hp color laserjet cp3505 cb442a • hp color laserjet cp3525 cc469a • hp color laserjet cp4005 cb503a • hp color laserjet cp6015 q3932a • hp color laserjet enterprise cp4025 cc490a • hp color laserjet enterprise cp4525 cc493a • hp digital sender 9250c cb472a • hp laserjet 4240 q7785a • hp laserjet 4250 q5400a • hp laserjet 4345 mfp q3942a • hp laserjet 4350 q5407a • hp laserjet 5200l q7543a • hp laserjet 5200n q7543a • hp laserjet 9040 q7697a • hp laserjet 9040 mfp q3721a • hp laserjet 9050 q7697a • hp laserjet 9050 mfp q3721a • hp laserjet enterprise p3015 ce526a • hp laserjet m3027 mfp cb416a • hp laserjet m3035 mfp cb414a • hp laserjet m3035 mfp cc519a • hp laserjet m4345 mfp cb425a • hp laserjet m5025 mfp q7840a • hp laserjet m5035 mfp q7829a • hp laserjet m9040 mpf cc394a • hp laserjet m9050 mpf cc395a • hp laserjet p3005 q7812a • hp laserjet p4014 cb507a • hp laserjet p4015 cb509a • hp laserjet p4515 cb514a

References