Lucene search
HP Product Security Response TeamHP:C04468293HistorySep 30, 2014 - 12:00 a.m.
HPSBHF03119 rev.3 - HP DreamColor Professional Display running Bash Shell, Remote Code Execution
2014-09-3000:00:00
HP Product Security Response Team
support.hp.com
42
0.976 High
EPSS
Percentile
100.0%
Potential Security Impact
Remote code execution
VULNERABILITY SUMMARY
A potential security vulnerability has been identified with HP DreamColor Z27x Professional Display running Bash Shell. This is the Bash Shell vulnerability known as “ShellShock” which could be exploited remotely to allow execution of code.
> note:
>
> Only the HP DreamColor Z27x model is vulnerable.
RESOLUTION
HP is actively working to address this vulnerability for the impacted product versions of HP DreamColor Z27x Professional Display. The display provides calibration and remote management functionality running on embedded Linux, which includes a bash shell. The shell is not accessible via the standard calibration or remote management interfaces.
This bulletin will be revised when the firmware update is released.
Related
freebsd
freebsd
bash -- remote code execution vulnerability
2014-09-24 00:00:00
nessus
nessus
Solaris 9 (sparc) : 149079-03
2014-10-09 00:00:00
Solaris 9 (x86) : 149080-01
2014-09-26 00:00:00
Fedora 21 : bash-4.3.25-2.fc21 (2014-11718) (Shellshock)
2014-09-29 00:00:00
packetstorm
packetstorm
Gnu Bash 4.3 CGI Scan Remote Command Injection
2014-09-26 00:00:00
Gnu Bash 4.3 CGI REFERER Command Injection
2014-09-26 00:00:00
TrendMicro InterScan Web Security Virtual Appliance Shellshock
2016-10-22 00:00:00
openvas
openvas
GNU Bash Environment Variable Handling RCE Vulnerability (Shellshock, Linux/Unix SSH Login, CVE-2014-7169) - Active Check
2014-10-08 00:00:00
CentOS Update for bash CESA-2014:1306 centos5
2014-10-01 00:00:00
Debian Security Advisory DSA 3035-1 (bash - security update)
2014-10-01 00:00:00
thn
thn
Hackers Using 'Shellshock' Bash Vulnerability to Launch Botnet Attacks
2014-09-26 20:07:00
threatpost
threatpost
Bash Botnet Exploit Found, Bash Patches Incomplete
2014-09-25 11:41:51
VMware Begins to Patch Bash Issues Across Product Line
2014-10-01 14:43:47
debian
debian
[SECURITY] [DSA 3035-1] bash security update
2014-09-25 21:18:46
[SECURITY] [DLA 63-1] bash security update
2014-09-25 22:35:21
[SECURITY] [DSA 3035-1] bash security update
2014-09-25 21:18:46
fedora
fedora
[SECURITY] Fedora 20 Update: bash-4.2.48-2.fc20
2014-09-26 09:03:00
[SECURITY] Fedora 19 Update: bash-4.2.48-2.fc19
2014-09-26 09:00:48
[SECURITY] Fedora 21 Update: bash-4.3.25-2.fc21
2014-09-27 10:08:26
debiancve
debiancve
attackerkb
attackerkb
securityvulns
securityvulns
[security bulletin] HPSBGN03117 rev.1 - HP Remote Device Access: Virtual Customer Access System (vCAS) running Bash Shell, Remote Code Execution
2014-10-05 00:00:00
cvelist
cvelist
ubuntucve
ubuntucve
cve
cve
symantec
symantec
GNU Bash CVE-2014-6271 Remote Code Execution Vulnerability
2014-09-24 00:00:00
gentoo
gentoo
Bash: Code Injection (Updated fix for GLSA 201409-09)
2014-09-25 00:00:00
Bash: Code Injection
2014-09-24 00:00:00
ics
ics
Bash Command Injection Vulnerability (Update A)
2018-09-06 12:00:00
myhack58
myhack58
mageia
mageia
Updated bash packages fix CVE-2014-7169
2014-09-28 16:17:31
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:01:57
Arbitrary File Overwrite
2019-01-15 09:02:02
archlinux
archlinux
bash: Remote code execution
2014-09-26 00:00:00
cloudfoundry
cloudfoundry
CVE-2014-6271 and CVE-2014-7169 - ShellShock | Cloud Foundry
2014-09-25 00:00:00
lenovo
lenovo
GNU Bourne-Again Shell (Bash) 'Shellshock' - Lenovo Support US
2016-11-16 00:00:00
ibm
ibm
osv
osv
bash - security update
2014-09-25 00:00:00
bash - security update
2014-09-26 00:00:00
nvd
nvd
nuclei
nuclei
ShellShock - Remote Code Execution
2020-10-01 18:03:35
paloalto
paloalto
Bash Shell remote code execution (CVE-2014-6271, CVE-2014-7169)
2014-09-24 00:00:00
checkpoint_security
checkpoint_security
cisa_kev
cisa_kev
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
2022-01-28 00:00:00
prion
prion
Design/Logic Flaw
2014-09-24 18:48:00
Design/Logic Flaw
2014-09-25 01:55:00
Design/Logic Flaw
2014-09-27 22:55:00
arista
arista
Security Advisory 0006
2014-09-29 00:00:00
suse
suse
bash (important)
2014-09-28 12:05:59
Security update for bash (important)
2014-09-28 19:05:16
bash (critical)
2014-09-29 14:04:19
redhat
redhat
(RHSA-2014:1865) Important: bash Shift_JIS security update
2014-11-17 00:00:00
(RHSA-2014:1311) Important: bash security update
2014-09-26 00:00:00
(RHSA-2014:1306) Important: bash security update
2014-09-26 00:00:00
amazon
amazon
Important: bash
2014-09-24 22:26:00
Critical: bash
2014-09-24 07:48:00
fortinet
fortinet
Remote Exploit Vulnerability in Bash - (Shellshock)
2014-09-25 00:00:00
nmap
nmap
http-shellshock NSE Script
2015-01-17 03:01:58
centos
centos
bash security update
2014-09-26 02:16:02
bash security update
2014-09-24 15:07:20
cisa
cisa
Oracle Patches Bash Vulnerabilities
2014-10-07 00:00:00
slackware
slackware
[slackware-security] bash
2014-09-25 20:38:49
SSA-2014-0925230703
2014-09-25 23:07:03
[slackware-security] bash
2014-09-29 19:33:36
hackerone
hackerone
saint
saint
Bash Environment Variable Handling Shell Command Injection Via CUPS
2014-11-05 00:00:00
ShellShock DHCP Server
2014-11-20 00:00:00
ShellShock DHCP Server
2014-11-20 00:00:00
zdt
zdt
FutureNet NXR-G240 Series ShellShock Command Injection Exploit
2018-12-08 00:00:00
DHCP Client Bash Environment Variable Code Injection Exploit
2014-09-26 00:00:00
Dhclient Bash Environment Variable Injection Exploit
2014-09-28 00:00:00
exploitpack
exploitpack
ubuntu
ubuntu
Bash vulnerability
2014-09-26 00:00:00
Bash vulnerability
2014-09-24 00:00:00
seebug
seebug
IPFire Cgi Web Interface Authenticated Bash Environment Variable Code Injection exploit
2014-10-10 00:00:00
GNU bash Environment Variable Command Injection (MSF)
2014-09-29 00:00:00