CVE-2004-1856 File upload in n/a

What is CVE-2004-1856?

CVE-2004-1856 is a medium-severity vulnerability in n/a, published on 10 May 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.

Which versions are affected by CVE-2004-1856?

It affects 1 product.

Products include Hp Web Jetadmin.

How do I fix CVE-2004-1856?

No fix has been published for CVE-2004-1856 yet. Limit exposure of the affected software until one is available.

Is CVE-2004-1856 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-1856 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2009-4182 Other in n/a Critical 9.0
• CVE-2017-2742 A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. High 7.5
• CVE-2012-2011 Cross-site scripting in n/a Medium 4.3
• CVE-2011-0278 Auth bypass in n/a Medium 4.3
• CVE-2004-1857 Path traversal in n/a Low 2.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-87c6-4vv3-cm22.