CVE-2013-4828

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via unspecified vectors.

Score

CVSS 2.0 4.3 Medium

Status

Modified - hp-security-alert@hp.com

Published

2013-10-04

Last modified

2024-09-16

Weaknesses

CWE-310

Affected products

• Color Laserjet Cm4540 (Hp)
• Color Laserjet Cm4540f (Hp)
• Color Laserjet Cm4540fskm (Hp)
• Color Laserjet M575dn (Hp)
• Color Laserjet M575f (Hp)
• Color Laserjet M775dn (Hp)
• Color Laserjet M775f (Hp)
• Color Laserjet M775z (Hp)
• Color Laserjet M775z+ (Hp)
• Laserjet Enterprise Color Flow M575c (Hp)
• Laserjet Flow M525c (Hp)
• Laserjet M4555 (Hp)
• Laserjet M4555f (Hp)
• Laserjet M4555fskm (Hp)
• Laserjet M4555h (Hp)
• Laserjet M525dn (Hp)
• Laserjet M525f (Hp)
• Laserjet M725dn (Hp)
• Laserjet M725f (Hp)
• Laserjet M725z (Hp)
• Laserjet M725z+ (Hp)
• Scanjet Enterprise 8500fn1 (Hp)

References

• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014