What’s Vulnerable › Vulnerabilities

CVE-2008-4419

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-02-05 · updated 2026-06-16
• Weakness: CWE-22

Description

Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color LaserJet 4730mfp before firmware 46.200.9; LaserJet 2410, LaserJet 2420, and LaserJet 2430 before firmware 20080819 SPCL112A; LaserJet 4250 and LaserJet 4350 before firmware 20080819 SPCL015A; and LaserJet 9040 and LaserJet 9050 before firmware 20080819 SPCL110A allows remote attackers to read arbitrary files via directory traversal sequences in the URI.

Affected products

• HP 9200C Digital Sender: through 20081211_09.131.1
• HP Color Laserjet 4370Mfp: through 20081211_46.211.2
• HP Color Laserjet 9500Mfp: through 20070719_05.011.2
• HP Laserjet 2410: through 20070410_08.112.3
• HP Laserjet 2420: through 20070410_08.112.3
• HP Laserjet 2430: through 20070410_08.112.3
• HP Laserjet 4250: through 20080319_08.015.0
• HP Laserjet 4345Mfp: through 20081211_09.131.1
• HP Laserjet 4350: through 20080319_08.015.0
• HP Laserjet 9040: through 20080204_08.110.0
• HP Laserjet 9040Mfp: through 20080204_08.110.0
• HP Laserjet 9050: through 20080204_08.110.0
• HP Laserjet 9050Mfp: through 20080204_08.110.0

References

• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905
• http://secunia.com/advisories/33779
• http://www.securityfocus.com/archive/1/500657/100/0/threaded
• http://www.securityfocus.com/bid/33611
• http://www.securitytracker.com/id?1021687
• http://www.vupen.com/english/advisories/2009/0341
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905
• http://secunia.com/advisories/33779
• http://www.securityfocus.com/archive/1/500657/100/0/threaded
• http://www.securityfocus.com/bid/33611
• http://www.securitytracker.com/id?1021687
• http://www.vupen.com/english/advisories/2009/0341

Get alerted when CVE-2008-4419 or the next vulnerability affects your stack