CVE-2012-5221

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742	Vendor Advisory
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742	Vendor Advisory
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742	Vendor Advisory
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:hp:color_laserjet_3000:q7534a:::::::*
	cpe:2.3:h:hp:color_laserjet_3800:q5981a:::::::*
	cpe:2.3:h:hp:color_laserjet_4700:q7492a:::::::*
	cpe:2.3:h:hp:color_laserjet_4730_mfp:cb480a:::::::*
	cpe:2.3:h:hp:color_laserjet_5550:q3714a:::::::*
	cpe:2.3:h:hp:color_laserjet_9500_mfp:c8549a:::::::*
	cpe:2.3:h:hp:color_laserjet_cm6030_mfp:ce664a:::::::*
	cpe:2.3:h:hp:color_laserjet_cm6040_mfp:q3939a:::::::*
	cpe:2.3:h:hp:color_laserjet_cp3505:cb442a:::::::*
	cpe:2.3:h:hp:color_laserjet_cp3525:cc469a:::::::*
	cpe:2.3:h:hp:color_laserjet_cp4005:cb503a:::::::*
	cpe:2.3:h:hp:color_laserjet_cp6015:q3932a:::::::*
	cpe:2.3:h:hp:color_laserjet_enterprise_cp4025:cc490a:::::::*
	cpe:2.3:h:hp:color_laserjet_enterprise_cp4525:cc493a:::::::*
	cpe:2.3:h:hp:digital_sender_9250c:cb472a:::::::*
	cpe:2.3:h:hp:laserjet_4240:q7785a:::::::*
	cpe:2.3:h:hp:laserjet_4250:q5400a:::::::*
	cpe:2.3:h:hp:laserjet_4345_mfp:q3942a:::::::*
	cpe:2.3:h:hp:laserjet_4350:q5407a:::::::*
	cpe:2.3:h:hp:laserjet_5200l:q7543a:::::::*
	cpe:2.3:h:hp:laserjet_5200n:q7543a:::::::*
	cpe:2.3:h:hp:laserjet_9040:q7697a:::::::*
	cpe:2.3:h:hp:laserjet_9040_mfp:q3721a:::::::*
	cpe:2.3:h:hp:laserjet_9050:q7697a:::::::*
	cpe:2.3:h:hp:laserjet_9050_mfp:q3721a:::::::*
	cpe:2.3:h:hp:laserjet_enterprise_p3015:ce526a:::::::*
	cpe:2.3:h:hp:laserjet_m3027_mfp:cb416a:::::::*
	cpe:2.3:h:hp:laserjet_m3035_mfp:cb414a:::::::*
	cpe:2.3:h:hp:laserjet_m3035_mfp:cc519a:::::::*
	cpe:2.3:h:hp:laserjet_m4345_mfp:cb425a:::::::*
	cpe:2.3:h:hp:laserjet_m5025_mfp:q7840a:::::::*
	cpe:2.3:h:hp:laserjet_m5035_mfp:q7829a:::::::*
	cpe:2.3:h:hp:laserjet_m9040_mpf:cc394a:::::::*
	cpe:2.3:h:hp:laserjet_m9050_mpf:cc395a:::::::*
	cpe:2.3:h:hp:laserjet_p3005:q7812a:::::::*
	cpe:2.3:h:hp:laserjet_p4014:cb507a:::::::*
	cpe:2.3:h:hp:laserjet_p4015:cb509a:::::::*
	cpe:2.3:h:hp:laserjet_p4515:cb514a:::::::*

History

21 Nov 2024, 01:44

Type	Values Removed	Values Added
References	~~() http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023 -~~	() http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023 -
References	~~() https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742 - Vendor Advisory~~	() https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742 - Vendor Advisory

Information

Published : 2013-04-29 21:55

Updated : 2025-04-11 00:51

NVD link : CVE-2012-5221

Mitre link : CVE-2012-5221

CVE.ORG link : CVE-2012-5221

JSON object : View

Products Affected

color_laserjet_cp3525
color_laserjet_cp3505
laserjet_m5035_mfp
laserjet_9040_mfp
laserjet_p4015
color_laserjet_cp4005
color_laserjet_3800
color_laserjet_cm6030_mfp
laserjet_9050_mfp
laserjet_m4345_mfp
laserjet_9050
laserjet_p4515
color_laserjet_5550
laserjet_p4014
color_laserjet_3000
laserjet_enterprise_p3015
laserjet_m3027_mfp
laserjet_5200n
laserjet_4250
color_laserjet_enterprise_cp4525
laserjet_m9050_mpf
color_laserjet_4730_mfp
color_laserjet_4700
color_laserjet_cp6015
laserjet_4350
laserjet_m5025_mfp
laserjet_4345_mfp
laserjet_9040
color_laserjet_cm6040_mfp
laserjet_5200l
laserjet_4240
laserjet_m9040_mpf
laserjet_p3005
laserjet_m3035_mfp
color_laserjet_9500_mfp
digital_sender_9250c
color_laserjet_enterprise_cp4025

CWE

NVD-CWE-noinfo

{"id": "CVE-2012-5221", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-04-29T21:55:00.997", "references": [{"url": "http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023", "source": "hp-security-alert@hp.com"}, {"url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742", "tags": ["Vendor Advisory"], "source": "hp-security-alert@hp.com"}, {"url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742", "tags": ["Vendor Advisory"], "source": "hp-security-alert@hp.com"}, {"url": "http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005 y P4xxx; LaserJet Enterprise P3015; 3xxx Color LaserJet, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005 y CP6015, Color LaserJet Enterprise CP4xxx y digital Sender 9250c con firmware hasta la version v52.x permite a atacantes remotos leer archivos de su elecci\u00f3n a trav\u00e9s de vectores desconocidos."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hp:color_laserjet_3000:q7534a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F29EB4F-23B6-4875-8205-082A2691C652"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_3800:q5981a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84F21488-DCD7-48B9-A8A3-9631B59DB078"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_4700:q7492a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE7F42C9-3C34-4631-949F-CF663D263367"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_4730_mfp:cb480a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED28FCCA-8127-4240-97BC-CBB075B0ABC2"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_5550:q3714a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84B6EFDF-C99F-425C-A90A-2D3E7FF0DEF7"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_9500_mfp:c8549a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83AE0FF2-987B-4649-BB62-7C8264411A0C"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_cm6030_mfp:ce664a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AA57C0C-3BDB-4142-A6BC-091BDA7DFBFE"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_cm6040_mfp:q3939a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F898C744-5304-4A09-AA2B-FB0807EB0E9D"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_cp3505:cb442a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92C41C33-22A8-40D1-AEE0-30F1AE68ECE6"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_cp3525:cc469a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C6F8A9C-3CB7-4ED7-A429-B38756C38DF6"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_cp4005:cb503a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF9C45B9-754F-48F4-9AAB-89F6EAA75DD7"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_cp6015:q3932a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6401654-D769-4EF0-87BF-75AE3E1B2AC0"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_enterprise_cp4025:cc490a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "891EEE00-61A5-4FD5-8EBB-B35B077C8BE6"}, {"criteria": "cpe:2.3:h:hp:color_laserjet_enterprise_cp4525:cc493a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7F925A9-96FE-4F0D-ADA6-DB7A9690A0C1"}, {"criteria": "cpe:2.3:h:hp:digital_sender_9250c:cb472a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAF4BAA8-430F-4448-A454-64FC333E5904"}, {"criteria": "cpe:2.3:h:hp:laserjet_4240:q7785a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "768B6070-68EB-4748-A4D2-7C99FD7A5669"}, {"criteria": "cpe:2.3:h:hp:laserjet_4250:q5400a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86E90120-D1E4-4569-BCF4-6E2AE0AB04DB"}, {"criteria": "cpe:2.3:h:hp:laserjet_4345_mfp:q3942a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAF59890-654A-4AEE-BF52-93E7AA796046"}, {"criteria": "cpe:2.3:h:hp:laserjet_4350:q5407a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F596D16-490E-4950-8A9B-5241906ED5B1"}, {"criteria": "cpe:2.3:h:hp:laserjet_5200l:q7543a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D60111B2-DAC6-4FB1-9921-B6550CAAD4C2"}, {"criteria": "cpe:2.3:h:hp:laserjet_5200n:q7543a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82F8D5DE-1D66-4F1E-B273-233814F0CC99"}, {"criteria": "cpe:2.3:h:hp:laserjet_9040:q7697a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D40FF37E-F95A-429D-BC5B-F48D7C47C88D"}, {"criteria": "cpe:2.3:h:hp:laserjet_9040_mfp:q3721a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "162B0C2C-8C9C-467D-A309-8DDA7CE72B63"}, {"criteria": "cpe:2.3:h:hp:laserjet_9050:q7697a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "660788B3-D2B6-4118-B443-9DE177FBE156"}, {"criteria": "cpe:2.3:h:hp:laserjet_9050_mfp:q3721a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69E39058-9565-4C1B-BB71-553ECB274216"}, {"criteria": "cpe:2.3:h:hp:laserjet_enterprise_p3015:ce526a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33ABE7DA-88CD-468B-9285-FE1509BA7D68"}, {"criteria": "cpe:2.3:h:hp:laserjet_m3027_mfp:cb416a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD3A0981-F09D-47B4-B441-3497291A9413"}, {"criteria": "cpe:2.3:h:hp:laserjet_m3035_mfp:cb414a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "008B528D-EBA7-4CC5-8E2F-F68D78222E45"}, {"criteria": "cpe:2.3:h:hp:laserjet_m3035_mfp:cc519a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA629824-72AF-40A5-8427-F5AFDE3AEBC1"}, {"criteria": "cpe:2.3:h:hp:laserjet_m4345_mfp:cb425a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D94328FB-B382-4231-8A4E-32C9AE7B8D33"}, {"criteria": "cpe:2.3:h:hp:laserjet_m5025_mfp:q7840a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "331317DD-0827-45B0-B2B9-A3713B3AA767"}, {"criteria": "cpe:2.3:h:hp:laserjet_m5035_mfp:q7829a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC132570-AB09-41CE-A3CF-755C9791171F"}, {"criteria": "cpe:2.3:h:hp:laserjet_m9040_mpf:cc394a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBB5A6D2-CFE3-4F7C-BD24-024D37836A65"}, {"criteria": "cpe:2.3:h:hp:laserjet_m9050_mpf:cc395a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E82E7BE5-3B46-47C2-A560-7C11CD8B361A"}, {"criteria": "cpe:2.3:h:hp:laserjet_p3005:q7812a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98B48314-2048-4856-80DA-EA08466EF53C"}, {"criteria": "cpe:2.3:h:hp:laserjet_p4014:cb507a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D5FE9B2-99DD-4A4F-8914-B1DC6EA3B6C8"}, {"criteria": "cpe:2.3:h:hp:laserjet_p4015:cb509a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F95EFE75-1428-4461-9062-56952EB96D32"}, {"criteria": "cpe:2.3:h:hp:laserjet_p4515:cb514a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EACC9283-F37A-426B-9AD9-05B2F8D6325D"}], "operator": "OR"}]}], "sourceIdentifier": "hp-security-alert@hp.com"}

5.0 /10