Spyware, viruses, & security forum: VULNERABILITIES / FIXES - March 07, 2013

HP LaserJet Pro Printers Unspecified Information Disclosure Vulnerability

Release Date: 2013-03-07

Criticality level : Less critical
Impact : Exposure of sensitive information
Where : From local network
Solution Status : Vendor Patch

Operating System :
HP HotSpot LaserJet Pro M1218nfs Multifunction Printer series
HP LaserJet Pro CP1025 Color Printer Series
HP LaserJet Pro M1212nf Multifunction Printer series
HP LaserJet Pro M1213nf Multifunction Printer series
HP LaserJet Pro M1214nfh Multifunction Printer series
HP LaserJet Pro M1216nfh Multifunction Printer series
HP LaserJet Pro M1217nfw Multifunction Printer series
HP LaserJet Pro M1219nf Multifunction Printer series
HP LaserJet Pro P1102 Printer Series
HP LaserJet Pro P1606dn Printer

Description:
A vulnerability has been reported in HP LaserJet Pro Printers, which can be exploited by malicious people to disclose potentially sensitive information.

The vulnerability is caused due to an unspecified error. No further information is currently available.

Please see the vendor's advisory for the list of affected devices.

Solution:
Update to the fixed version (Please see the vendor's advisory for details).

Provided and/or discovered by:
The vendor credits Christoph von Wittich, Hentschke Bau GmbH.

Original Advisory:
HPSBPI02851 SSRT101078:
http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03684249-1

http://secunia.com/advisories/52505/