CVE-2006-1654: HP Color Laserjet

Medium severity, CVSS 5.0. EPSS: 4.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.

Affected products

• HP Color Laserjet: version 4600dn only; version 4600dtn only; version 4600hdn only
• HP Color Laserjet 2500: any version
• HP Color Laserjet 2500 Toolbox: any version
• HP Color Laserjet 2500l: any version
• HP Color Laserjet 2500lse: any version
• HP Color Laserjet 2500n: any version
• HP Color Laserjet 2500tn: any version
• HP Color Laserjet 4600: any version
• HP Color Laserjet 4600 Toolbox: any version

Published 2006-04-06. Last modified 2026-06-16.