CVE-2004-2439: HP Color Laserjet

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.

Affected products

• HP Color Laserjet: version 4650 only; version 5500 only; version 5550 only
• HP Color Laserjet 4600: any version
• HP Laserjet 2500: any version
• HP Laserjet 3000: any version
• HP Laserjet 3700: any version
• HP Laserjet 4100 Mfp: any version
• HP Laserjet 4200: any version
• HP Laserjet 4300: any version
• HP Laserjet 9000: any version
• HP Laserjet 9000 Mfp: any version
• HP Laserjet 9040 Mpf: any version
• HP Laserjet 9050: any version
• HP Laserjet 9050 Mpf: any version
• HP Laserjet 9055: any version
• HP Laserjet 9065: any version
• HP Laserjet 9500: any version
• HP Laserjet 9500 Mpf: any version

Published 2004-12-31. Last modified 2026-06-16.