CVE-2012-3272: XSS
First published: Thu Dec 06 2012(Updated: )
Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before 06.140.3 18, Color LaserJet CP4xxx with firmware before 07.120.6, Color LaserJet CP6015 with firmware before 04.160.3, LaserJet P3015 with firmware before 07.140.3, and LaserJet P4xxx with firmware before 04.170.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: hp-security-alert@hp.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP Color LaserJet M3530 Multifunction Printer | <=53.190.8 | |
| HP Color LaserJet CM6050 | <=53.190.8 | |
| Hp Color Laserjet Cp3525 Printer | <=06.140.3.17 | |
| HP Color LaserJet CP4005 | <=07.120.5 | |
| HP Color LaserJet cp6015 | <=04.160.2 | |
| HP LaserJet P3015 | <=07.140.2 | |
| HP LaserJet P4xxx | <=04.170.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-3272?
CVE-2012-3272 is rated as a medium severity vulnerability due to its cross-site scripting nature.
How do I fix CVE-2012-3272?
To fix CVE-2012-3272, update the affected HP Color LaserJet firmware to the latest version as specified by HP.
Which devices are affected by CVE-2012-3272?
CVE-2012-3272 affects multiple HP Color LaserJet models, including CM3530, CM60xx, CP3525, CP4xxx, CP6015, and others with specific firmware versions.
What type of vulnerability is CVE-2012-3272?
CVE-2012-3272 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
What are the risks associated with CVE-2012-3272?
The risks associated with CVE-2012-3272 include potential exposure to data theft and unauthorized actions being executed in the context of a user session.
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/hp
- canonical/hp color laserjet m3530 multifunction printer
- version/hp color laserjet m3530 multifunction printer/53.190.8
- canonical/hp color laserjet cm6050
- version/hp color laserjet cm6050/53.190.8
- canonical/hp color laserjet cp3525 printer
- version/hp color laserjet cp3525 printer/06.140.3.17
- canonical/hp color laserjet cp4005
- version/hp color laserjet cp4005/07.120.5
- canonical/hp color laserjet cp6015
- version/hp color laserjet cp6015/04.160.2
- canonical/hp laserjet p3015
- version/hp laserjet p3015/07.140.2
- canonical/hp laserjet p4xxx
- version/hp laserjet p4xxx/04.170.2