Unrated severityNVD Advisory· Published Mar 18, 2009· Updated Apr 23, 2026

CVE-2009-0940

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.

Affected products

164

HP/8100c Digital Sender
cpe:2.3:h:hp:8100c_digital_sender:-:*:*:*:*:*:*:*
HP/9100c Digital Sender
cpe:2.3:h:hp:9100c_digital_sender:-:*:*:*:*:*:*:*
HP/9200c Digital Sender
cpe:2.3:h:hp:9200c_digital_sender:-:*:*:*:*:*:*:*
HP/9250c Digital Sender
cpe:2.3:h:hp:9250c_digital_sender:-:*:*:*:*:*:*:*
HP/Laserjet 4000n
cpe:2.3:h:hp:laserjet_4000n:*:*:*:*:*:*:*:*
HP/Laserjet 4050
cpe:2.3:h:hp:laserjet_4050:*:*:*:*:*:*:*:*
HP/Laserjet 4100
cpe:2.3:h:hp:laserjet_4100:*:*:*:*:*:*:*:*
HP/Laserjet 4100mfp2 versions
cpe:2.3:h:hp:laserjet_4100_mfp:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:laserjet_4100_mfp:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_4100mfp:*:*:*:*:*:*:*:*
HP/Laserjet 4200
cpe:2.3:h:hp:laserjet_4200:*:*:*:*:*:*:*:*
HP/Laserjet 4200dtn
cpe:2.3:h:hp:laserjet_4200dtn:*:*:*:*:*:*:*:*
HP/Laserjet 4200ln
cpe:2.3:h:hp:laserjet_4200ln:*:*:*:*:*:*:*:*
HP/Laserjet 4240
cpe:2.3:h:hp:laserjet_4240:*:*:*:*:*:*:*:*
HP/Laserjet 4240n
cpe:2.3:h:hp:laserjet_4240n:*:*:*:*:*:*:*:*
HP/Laserjet 42502 versions
cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_4250:20080319_08.015.0:*:*:*:*:*:*:*
HP/Laserjet 4650dn
cpe:2.3:h:hp:laserjet_4650dn:*:*:*:*:*:*:*:*
HP/Laserjet 4l\/ML
cpe:2.3:h:hp:laserjet_4l\/ml:*:*:*:*:*:*:*:*
HP/Laserjet 4m Plus
cpe:2.3:h:hp:laserjet_4m_plus:*:*:*:*:*:*:*:*
HP/Laserjet 4p\/mp
cpe:2.3:h:hp:laserjet_4p\/mp:*:*:*:*:*:*:*:*
HP/Laserjet 4si
cpe:2.3:h:hp:laserjet_4si:*:*:*:*:*:*:*:*
HP/Laserjet 4v\/mv
cpe:2.3:h:hp:laserjet_4v\/mv:*:*:*:*:*:*:*:*
HP/Laserjet 5
cpe:2.3:h:hp:laserjet_5:*:*:*:*:*:*:*:*
HP/Laserjet 5\/m\/n
cpe:2.3:h:hp:laserjet_5\/m\/n:*:*:*:*:*:*:*:*
HP/Laserjet 500 Plus
cpe:2.3:h:hp:laserjet_500_plus:*:*:*:*:*:*:*:*
HP/Laserjet 50003 versions
cpe:2.3:h:hp:laserjet_5000:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:h:hp:laserjet_5000:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_5000:r.25.15:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_5000:r.25.47:*:*:*:*:*:*:*
HP/Laserjet 51002 versions
cpe:2.3:h:hp:laserjet_5100:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:laserjet_5100:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_5100:v.29.12:*:*:*:*:*:*:*
HP/Laserjet 5100dtn
cpe:2.3:h:hp:laserjet_5100dtn:*:*:*:*:*:*:*:*
HP/Laserjet 5200
cpe:2.3:h:hp:laserjet_5200:*:*:*:*:*:*:*:*
HP/Laserjet 5l
cpe:2.3:h:hp:laserjet_5l:*:*:*:*:*:*:*:*
HP/Laserjet 5m
cpe:2.3:h:hp:laserjet_5m:*:*:*:*:*:*:*:*
HP/Laserjet 5p\/mp
cpe:2.3:h:hp:laserjet_5p\/mp:*:*:*:*:*:*:*:*
HP/Laserjet 5si
cpe:2.3:h:hp:laserjet_5si:*:*:*:*:*:*:*:*
HP/Laserjet 8000
cpe:2.3:h:hp:laserjet_8000:*:*:*:*:*:*:*:*
HP/Laserjet 8100
cpe:2.3:h:hp:laserjet_8100:*:*:*:*:*:*:*:*
HP/Laserjet 8150
cpe:2.3:h:hp:laserjet_8150:*:*:*:*:*:*:*:*
HP/Laserjet 8150dn
cpe:2.3:h:hp:laserjet_8150dn:*:*:*:*:*:*:*:*
HP/Laserjet 9000
cpe:2.3:h:hp:laserjet_9000:*:*:*:*:*:*:*:*
HP/Laserjet 9000mfp2 versions
cpe:2.3:h:hp:laserjet_9000_mfp:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:laserjet_9000_mfp:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_9000mfp:*:*:*:*:*:*:*:*
HP/Laserjet 90402 versions
cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_9040:20080204_08.110.0:*:*:*:*:*:*:*
HP/Laserjet 9040mfp2 versions
cpe:2.3:h:hp:laserjet_9040mfp:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:laserjet_9040mfp:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_9040mfp:20080204_08.110.0:*:*:*:*:*:*:*
HP/Laserjet 90502 versions
cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_9050:20080204_08.110.0:*:*:*:*:*:*:*
HP/Laserjet 9050mfp3 versions
cpe:2.3:h:hp:laserjet_9050_mfp:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:h:hp:laserjet_9050_mfp:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_9050mfp:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_9050mfp:20080204_08.110.0:*:*:*:*:*:*:*
HP/Laserjet 9055
cpe:2.3:h:hp:laserjet_9055:*:*:*:*:*:*:*:*
HP/Laserjet 9065
cpe:2.3:h:hp:laserjet_9065:*:*:*:*:*:*:*:*
HP/Laserjet 9500
cpe:2.3:h:hp:laserjet_9500:*:*:*:*:*:*:*:*
HP/Laserjet 9500mfp
cpe:2.3:h:hp:laserjet_9500mfp:*:*:*:*:*:*:*:*
HP/Laserjet Ii
cpe:2.3:h:hp:laserjet_ii:*:*:*:*:*:*:*:*
HP/Laserjet Iid
cpe:2.3:h:hp:laserjet_iid:*:*:*:*:*:*:*:*
HP/Laserjet Iii
cpe:2.3:h:hp:laserjet_iii:*:*:*:*:*:*:*:*
HP/Laserjet Iiid
cpe:2.3:h:hp:laserjet_iiid:*:*:*:*:*:*:*:*
HP/Laserjet Iiip
cpe:2.3:h:hp:laserjet_iiip:*:*:*:*:*:*:*:*
HP/Laserjet Iiisi
cpe:2.3:h:hp:laserjet_iiisi:*:*:*:*:*:*:*:*
HP/Laserjet Iip
cpe:2.3:h:hp:laserjet_iip:*:*:*:*:*:*:*:*
HP/Laserjet Iip Plus
cpe:2.3:h:hp:laserjet_iip_plus:*:*:*:*:*:*:*:*
HP/Laserjet M1522n Mfp
cpe:2.3:h:hp:laserjet_m1522n_mfp:*:*:*:*:*:*:*:*
HP/Laserjet M3027 Mfp
cpe:2.3:h:hp:laserjet_m3027_mfp:*:*:*:*:*:*:*:*
HP/Color Laserjet
cpe:2.3:h:hp:color_laserjet:*:*:*:*:*:*:*:*
HP/Color Laserjet 1500
cpe:2.3:h:hp:color_laserjet_1500:*:*:*:*:*:*:*:*
HP/Color Laserjet 2500
cpe:2.3:h:hp:color_laserjet_2500:*:*:*:*:*:*:*:*
HP/Color Laserjet 2500l
cpe:2.3:h:hp:color_laserjet_2500l:*:*:*:*:*:*:*:*
HP/Color Laserjet 2500lse
cpe:2.3:h:hp:color_laserjet_2500lse:*:*:*:*:*:*:*:*
HP/Color Laserjet 2500n
cpe:2.3:h:hp:color_laserjet_2500n:*:*:*:*:*:*:*:*
HP/Color Laserjet 2500tn
cpe:2.3:h:hp:color_laserjet_2500tn:*:*:*:*:*:*:*:*
HP/Color Laserjet 2605dtn
cpe:2.3:h:hp:color_laserjet_2605dtn:*:*:*:*:*:*:*:*
HP/Color Laserjet 4370mfp
cpe:2.3:h:hp:color_laserjet_4370mfp:20081211_46.211.2:*:*:*:*:*:*:*
HP/Color Laserjet 4600
cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*
HP/Color Laserjet 4600dn
cpe:2.3:h:hp:color_laserjet_4600dn:*:*:*:*:*:*:*:*
HP/Color Laserjet 4600dtn
cpe:2.3:h:hp:color_laserjet_4600dtn:*:*:*:*:*:*:*:*
HP/Color Laserjet 4600hdn
cpe:2.3:h:hp:color_laserjet_4600hdn:*:*:*:*:*:*:*:*
HP/Color Laserjet 4650
cpe:2.3:h:hp:color_laserjet_4650:*:*:*:*:*:*:*:*
HP/Color Laserjet 4700
cpe:2.3:h:hp:color_laserjet_4700:*:*:*:*:*:*:*:*
HP/Color Laserjet 4730 Mfp
cpe:2.3:h:hp:color_laserjet_4730_mfp:*:*:*:*:*:*:*:*
HP/Color Laserjet 5500
cpe:2.3:h:hp:color_laserjet_5500:*:*:*:*:*:*:*:*
HP/Color Laserjet 5550
cpe:2.3:h:hp:color_laserjet_5550:*:*:*:*:*:*:*:*
HP/Color Laserjet 8500
cpe:2.3:h:hp:color_laserjet_8500:*:*:*:*:*:*:*:*
HP/Color Laserjet 8550
cpe:2.3:h:hp:color_laserjet_8550:*:*:*:*:*:*:*:*
HP/Color Laserjet 9500
cpe:2.3:h:hp:color_laserjet_9500:*:*:*:*:*:*:*:*
HP/Color Laserjet 9500mfp2 versions
cpe:2.3:h:hp:color_laserjet_9500_mfp:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:color_laserjet_9500_mfp:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:color_laserjet_9500mfp:20070719_05.011.2:*:*:*:*:*:*:*
HP/Color Mfp Cm8050
cpe:2.3:h:hp:color_mfp_cm8050:-:-:edgeline:*:*:*:*:*
HP/Color Mfp Cm8060
cpe:2.3:h:hp:color_mfp_cm8060:-:-:edgeline:*:*:*:*:*
HP/Digital Senders
cpe:2.3:h:hp:digital_senders:*:*:*:*:*:*:*:*
HP/Edgeline Printers
cpe:2.3:h:hp:edgeline_printers:*:*:*:*:*:*:*:*
HP/Laserjet 1000
cpe:2.3:h:hp:laserjet_1000:*:*:*:*:*:*:*:*
HP/Laserjet 1005
cpe:2.3:h:hp:laserjet_1005:*:*:*:*:*:*:*:*
HP/Laserjet 1010
cpe:2.3:h:hp:laserjet_1010:*:*:*:*:*:*:*:*
HP/Laserjet 1012
cpe:2.3:h:hp:laserjet_1012:*:*:*:*:*:*:*:*
HP/Laserjet 1015
cpe:2.3:h:hp:laserjet_1015:*:*:*:*:*:*:*:*
HP/Laserjet 1018
cpe:2.3:h:hp:laserjet_1018:*:*:*:*:*:*:*:*
HP/Laserjet 1018s
cpe:2.3:h:hp:laserjet_1018s:*:*:*:*:*:*:*:*
HP/Laserjet 1020
cpe:2.3:h:hp:laserjet_1020:*:*:*:*:*:*:*:*
HP/Laserjet 1020 Plus
cpe:2.3:h:hp:laserjet_1020_plus:*:*:*:*:*:*:*:*
HP/Laserjet 1022
cpe:2.3:h:hp:laserjet_1022:*:*:*:*:*:*:*:*
HP/Laserjet 1022n
cpe:2.3:h:hp:laserjet_1022n:*:*:*:*:*:*:*:*
HP/Laserjet 1022nw
cpe:2.3:h:hp:laserjet_1022nw:*:*:*:*:*:*:*:*
HP/Laserjet 1100
cpe:2.3:h:hp:laserjet_1100:*:*:*:*:*:*:*:*
HP/Laserjet 1150
cpe:2.3:h:hp:laserjet_1150:*:*:*:*:*:*:*:*
HP/Laserjet 1160
cpe:2.3:h:hp:laserjet_1160:*:*:*:*:*:*:*:*
HP/Laserjet 1200
cpe:2.3:h:hp:laserjet_1200:*:*:*:*:*:*:*:*
HP/Laserjet 1300
cpe:2.3:h:hp:laserjet_1300:*:*:*:*:*:*:*:*
HP/Laserjet 1320
cpe:2.3:h:hp:laserjet_1320:*:*:*:*:*:*:*:*
HP/Laserjet 2
cpe:2.3:h:hp:laserjet_2:*:*:*:*:*:*:*:*
HP/Laserjet 2000
cpe:2.3:h:hp:laserjet_2000:*:*:*:*:*:*:*:*
HP/Laserjet 2100
cpe:2.3:h:hp:laserjet_2100:*:*:*:*:*:*:*:*
HP/Laserjet 2200
cpe:2.3:h:hp:laserjet_2200:*:*:*:*:*:*:*:*
HP/Laserjet 2200dtn
cpe:2.3:h:hp:laserjet_2200dtn:*:*:*:*:*:*:*:*
HP/Laserjet 2300
cpe:2.3:h:hp:laserjet_2300:*:*:*:*:*:*:*:*
HP/Laserjet 2300dn
cpe:2.3:h:hp:laserjet_2300dn:*:*:*:*:*:*:*:*
HP/Laserjet 2400
cpe:2.3:h:hp:laserjet_2400:*:*:*:*:*:*:*:*
HP/Laserjet 2410
cpe:2.3:h:hp:laserjet_2410:20070410_08.112.3:*:*:*:*:*:*:*
HP/Laserjet 2420
cpe:2.3:h:hp:laserjet_2420:20070410_08.112.3:*:*:*:*:*:*:*
HP/Laserjet 24302 versions
cpe:2.3:h:hp:laserjet_2430:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:laserjet_2430:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_2430:20070410_08.112.3:*:*:*:*:*:*:*
HP/Laserjet 2500
cpe:2.3:h:hp:laserjet_2500:*:*:*:*:*:*:*:*
HP/Laserjet 2500c
cpe:2.3:h:hp:laserjet_2500c:*:*:*:*:*:*:*:*
HP/Laserjet 2600c
cpe:2.3:h:hp:laserjet_2600c:*:*:*:*:*:*:*:*
HP/Laserjet 2600n
cpe:2.3:h:hp:laserjet_2600n:*:*:*:*:*:*:*:*
HP/Laserjet 3000
cpe:2.3:h:hp:laserjet_3000:*:*:*:*:*:*:*:*
HP/Laserjet 3700
cpe:2.3:h:hp:laserjet_3700:*:*:*:*:*:*:*:*
HP/Laserjet 4
cpe:2.3:h:hp:laserjet_4:*:*:*:*:*:*:*:*
HP/Laserjet 4\/4m
cpe:2.3:h:hp:laserjet_4\/4m:*:*:*:*:*:*:*:*
HP/Laserjet 4 Plus\/m Plus
cpe:2.3:h:hp:laserjet_4_plus\/m_plus:*:*:*:*:*:*:*:*
HP/Laserjet 4000
cpe:2.3:h:hp:laserjet_4000:*:*:*:*:*:*:*:*
HP/Laserjet 4300
cpe:2.3:h:hp:laserjet_4300:*:*:*:*:*:*:*:*
HP/Laserjet 4345mfp2 versions
cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_4345mfp:20081211_09.131.1:*:*:*:*:*:*:*
HP/Laserjet 43502 versions
cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*
- cpe:2.3:h:hp:laserjet_4350:20080319_08.015.0:*:*:*:*:*:*:*
HP/Laserjet 4350dtn
cpe:2.3:h:hp:laserjet_4350dtn:*:*:*:*:*:*:*:*
HP/Laserjet M3035 Mfp
cpe:2.3:h:hp:laserjet_m3035_mfp:*:*:*:*:*:*:*:*
HP/Laserjet M4345 Mfp
cpe:2.3:h:hp:laserjet_m4345_mfp:*:*:*:*:*:*:*:*
HP/Laserjet M5025 Mfp
cpe:2.3:h:hp:laserjet_m5025_mfp:*:*:*:*:*:*:*:*
HP/Laserjet M5035 Mfp
cpe:2.3:h:hp:laserjet_m5035_mfp:*:*:*:*:*:*:*:*
HP/Laserjet P1000
cpe:2.3:h:hp:laserjet_p1000:*:*:*:*:*:*:*:*
HP/Laserjet P1005
cpe:2.3:h:hp:laserjet_p1005:*:*:*:*:*:*:*:*
HP/Laserjet P1006
cpe:2.3:h:hp:laserjet_p1006:*:*:*:*:*:*:*:*
HP/Laserjet P1007
cpe:2.3:h:hp:laserjet_p1007:*:*:*:*:*:*:*:*
HP/Laserjet P1008
cpe:2.3:h:hp:laserjet_p1008:*:*:*:*:*:*:*:*
HP/Laserjet P1009
cpe:2.3:h:hp:laserjet_p1009:*:*:*:*:*:*:*:*
HP/Laserjet P1500
cpe:2.3:h:hp:laserjet_p1500:*:*:*:*:*:*:*:*
HP/Laserjet P1505
cpe:2.3:h:hp:laserjet_p1505:*:*:*:*:*:*:*:*
HP/Laserjet P1505n
cpe:2.3:h:hp:laserjet_p1505n:*:*:*:*:*:*:*:*
HP/Laserjet P2000
cpe:2.3:h:hp:laserjet_p2000:*:*:*:*:*:*:*:*
HP/Laserjet P2010
cpe:2.3:h:hp:laserjet_p2010:*:*:*:*:*:*:*:*
HP/Laserjet P2015
cpe:2.3:h:hp:laserjet_p2015:*:*:*:*:*:*:*:*
HP/Laserjet P2030
cpe:2.3:h:hp:laserjet_p2030:*:*:*:*:*:*:*:*
HP/Laserjet P2050
cpe:2.3:h:hp:laserjet_p2050:*:*:*:*:*:*:*:*
HP/Laserjet P3000
cpe:2.3:h:hp:laserjet_p3000:*:*:*:*:*:*:*:*
HP/Laserjet P3005
cpe:2.3:h:hp:laserjet_p3005:*:*:*:*:*:*:*:*
HP/Laserjet P4010
cpe:2.3:h:hp:laserjet_p4010:*:*:*:*:*:*:*:*
HP/Laserjet P4014
cpe:2.3:h:hp:laserjet_p4014:*:*:*:*:*:*:*:*
HP/Laserjet P4015
cpe:2.3:h:hp:laserjet_p4015:*:*:*:*:*:*:*:*
HP/Laserjet P4500
cpe:2.3:h:hp:laserjet_p4500:*:*:*:*:*:*:*:*
HP/Laserjet P4510
cpe:2.3:h:hp:laserjet_p4510:*:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.louhinetworks.fi/advisory/HP_20090317.txtnvdExploit
h20000.www2.hp.com/bizsupport/TechSupport/Document.jspnvdVendor Advisory
osvdb.org/52847nvd
osvdb.org/52848nvd
osvdb.org/52849nvd
www.securityfocus.com/archive/1/501884/100/0/threadednvd
www.securityfocus.com/bid/34143nvd
www.vupen.com/english/advisories/2009/0754nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000