CVE:CVE-2004-2439
CNNVD:CNNVD-200412-1157
HP LaserJet 4200和4300打印机的远程升级功能不需要密码。远程攻击者可以升级固件。
solution:Upgrade hp color_laserjet to a higher version than 4650,5500,5550,and avoid the version 4650,5500,5550; Upgrade hp color_laserjet_4600 to a higher version than *; Upgrade hp laserjet_2500 to a higher version than *; Upgrade hp laserjet_3000 to a higher version than *; Upgrade hp laserjet_3700 to a higher version than *; Upgrade hp laserjet_4100_mfp to a higher version than *; Upgrade hp laserjet_4200 to a higher version than *; Upgrade hp laserjet_4300 to a higher version than *; Upgrade hp laserjet_9000 to a higher version than *; Upgrade hp laserjet_9000_mfp to a higher version than *; Upgrade hp laserjet_9040_mpf to a higher version than *; Upgrade hp laserjet_9050 to a higher version than *; Upgrade hp laserjet_9050_mpf to a higher version than *; Upgrade hp laserjet_9055 to a higher version than *; Upgrade hp laserjet_9065 to a higher version than *; Upgrade hp laserjet_9500 to a higher version than *; Upgrade hp laserjet_9500_mpf to a higher version than *