|
|
|
|
| |
Credit:
The original article can be found at: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02738104
|
| |
Vulnerable Systems:
* HP MFP Digital Sending Software v4.91.00
The vulnerability could cause authentication to be disabled for managed devices. This could allow access to the devices from the Digital Sending Software without authentication.
Workaround:
Until a new version of HP MFP Digital Sending Software is available the vulnerability can be avoided as follows.
When using the Configuration Template feature added in version 4.91 of the HP MFP Digital Sending Software,
1. Insure that authentication is specified in all device templates
2. Reconfigure all devices previously configured using templates with these revised templates
Note: The procedure above is needed only if
* Authentication is required
* A device had previously been configured using a template that did not include authentication settings
CVE Information:
CVE-2011-0279
Disclosure Timeline:
Release Date: 2011-03-02
Last Updated: 2011-03-02
|
|
|
|
|
