The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jetadmin | Hp | 4.0 (including) | 4.0 (including) |
| Jetadmin | Hp | 4.1.2 (including) | 4.1.2 (including) |
| Jetadmin | Hp | 5.1 (including) | 5.1 (including) |
| Jetadmin | Hp | 5.5 (including) | 5.5 (including) |
| Jetadmin | Hp | 5.5.177 (including) | 5.5.177 (including) |
| Jetadmin | Hp | 5.6 (including) | 5.6 (including) |
| Jetadmin | Hp | 6.0 (including) | 6.0 (including) |
| Jetadmin | Hp | 6.1 (including) | 6.1 (including) |
| Jetadmin | Hp | 6.2 (including) | 6.2 (including) |