CVE-1999-1061: High severity HP JetDirect vulnerability
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure a strong administrative password on the JetDirect card to prevent unauthenticated remote configuration.
HP JetDirect admin_password = set a strong administrative password - Configuration
Require authentication for remote TCP/IP management and disable any option that allows configuration without a password.
HP JetDirect remote_management_authentication = required/enabled - Configuration
Ensure logging is enabled on the JetDirect card so administrative changes are recorded and cannot be disabled without authentication.
HP JetDirect logging_enabled = enabled - Compensating control
Restrict network access to the JetDirect management interface: apply firewall rules, ACLs, or network segmentation so only trusted management hosts/IP ranges can reach the JetDirect TCP/IP management ports.
- Operational
Audit deployed JetDirect devices: verify current IP addresses and logging settings, check logs for unauthorized changes, and restore correct network and logging configuration where necessary.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1061?
CVE-1999-1061 has been identified as a moderate severity vulnerability due to the potential for unauthorized access to printer configuration.
How do I fix CVE-1999-1061?
To fix CVE-1999-1061, ensure that the HP Laserjet printers with JetDirect cards are configured with a secure password to prevent unauthorized access.
What systems are affected by CVE-1999-1061?
CVE-1999-1061 affects HP Laserjet printers that are configured with JetDirect cards running TCP/IP without password protection.
Can CVE-1999-1061 lead to further attacks?
Yes, CVE-1999-1061 can lead to further attacks as attackers can change printer settings or disable logging, which may cover their tracks.
How can I determine if my printer is vulnerable to CVE-1999-1061?
You can determine if your printer is vulnerable to CVE-1999-1061 by checking if it is configured with TCP/IP without a password on HP JetDirect cards.