Unscored CVE-2009-0941 EUVD-2009-0938GHSA-fj5m-7qwm-v3qc

The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, whi…

Published Mar 18, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.

References

ADV-2009-0754 vdb-entry
HPSN-2009-001 vendor-advisory
20090316 HP Laserjet multiple models web management CSRF vulnerability & insecure default configuration mailing-list
http://www.louhinetworks.fi/advisory/HP_20090317.txt