What’s Vulnerable › Vulnerabilities

CVE-2010-4107

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 13.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-11-17 · updated 2026-06-16
• Weakness: CWE-22

Description

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.

Affected products

• HP 9000: all versions
• HP Color Laserjet Mfp: all versions
• HP Laserjet 4100: all versions
• HP Laserjet 4200: all versions
• HP Laserjet 4300: all versions
• HP Laserjet 5100: all versions
• HP Laserjet 8150: all versions
• HP Laserjet Mfp: all versions

References

• http://secunia.com/advisories/42238
• http://securityreason.com/securityalert/8328
• http://securitytracker.com/id?1024741
• http://www.exploit-db.com/exploits/15631
• http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333
• http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf
• http://www.securityfocus.com/bid/44882
• http://www.vupen.com/english/advisories/2010/2987
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63261
• http://secunia.com/advisories/42238
• http://securityreason.com/securityalert/8328
• http://securitytracker.com/id?1024741

Get alerted when CVE-2010-4107 or the next vulnerability affects your stack