CVE-2004-1856

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 29.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-03-24 · updated 2026-06-16

Description

devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.

Affected products

HP Inc. Web Jetadmin: 7.5.2546

References

http://marc.info/?l=bugtraq&m=108016019623003&w=2
http://sh0dan.org/files/hpjadmadv.txt
http://www.securityfocus.com/advisories/6492
http://www.securityfocus.com/bid/9971
https://exchange.xforce.ibmcloud.com/vulnerabilities/15605
http://marc.info/?l=bugtraq&m=108016019623003&w=2
http://sh0dan.org/files/hpjadmadv.txt
http://www.securityfocus.com/advisories/6492
http://www.securityfocus.com/bid/9971
https://exchange.xforce.ibmcloud.com/vulnerabilities/15605

Get alerted when CVE-2004-1856 or the next vulnerability affects your stack