CVE-2004-1856: HP Web Jetadmin

Medium severity, CVSS 5.0. EPSS: 29.5% chance of exploitation in the next 30 days.

devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.

Affected products

• HP Web Jetadmin: version 7.5.2546 only

Published 2004-03-24. Last modified 2026-06-16.