CVE-2011-1531

2011-04-1500:55:01

CWE-200

[email protected]

web.nvd.nist.gov

hp printers

webscan

embedded web server

remote access

security vulnerability

nvd

cve-2011-1531

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.6%

JSON

The webscan component in the Embedded Web Server (EWS) on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to read documents on the scan surface via unspecified vectors.

Affected configurations

NVD

Node

hpenvy_100_d410

hpphotosmart_b110

hpphotosmart_d110

hpphotosmart_plus_b210

hpphotosmart_premium_c310

hpphotosmart_premium_c510

hpphotosmart_premium_fax_all-in-one

CPENameOperatorVersion
hp:envy_100_d410hp envy 100 d410eq*
hp:photosmart_b110hp photosmart b110eq*
hp:photosmart_d110hp photosmart d110eq*
hp:photosmart_plus_b210hp photosmart plus b210eq*
hp:photosmart_premium_c310hp photosmart premium c310eq*
hp:photosmart_premium_c510hp photosmart premium c510eq*
hp:photosmart_premium_fax_all-in-onehp photosmart premium fax all-in-oneeq*

CPE	Name	Operator	Version
hp:envy_100_d410	hp envy 100 d410	eq	*
hp:photosmart_b110	hp photosmart b110	eq	*
hp:photosmart_d110	hp photosmart d110	eq	*
hp:photosmart_plus_b210	hp photosmart plus b210	eq	*
hp:photosmart_premium_c310	hp photosmart premium c310	eq	*
hp:photosmart_premium_c510	hp photosmart premium c510	eq	*
hp:photosmart_premium_fax_all-in-one	hp photosmart premium fax all-in-one	eq	*