CVE-2011-4161: HP Color Laserjet 3000

High severity, CVSS 10.0. EPSS: 13.9% chance of exploitation in the next 30 days.

The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.

Affected products

• HP Color Laserjet 3000: any version
• HP Color Laserjet 3800: any version
• HP Color Laserjet 4700: any version
• HP Color Laserjet 4730: version mfp only
• HP Color Laserjet 4730 Mfp: any version
• HP Color Laserjet 5550: any version
• HP Color Laserjet 9500: any version
• HP Color Laserjet CM3530: any version
• HP Color Laserjet CM4540: version mfp only
• HP Color Laserjet CM4730: version mfp only
• HP Color Laserjet CM6030: any version
• HP Color Laserjet CM6040: any version
• HP Color Laserjet CP3505: any version
• HP Color Laserjet CP3525: any version
• HP Color Laserjet CP4005: any version
• HP Color Laserjet CP5525: any version
• HP Color Laserjet CP6015: any version
• HP Color Laserjet Enterprise CP4520: any version
• HP Color Laserjet Enterprise CP4525: any version
• HP Color Mfp CM8060: affected versions not specified
• HP Digital Sender 9200c: any version
• HP Digital Sender 9250c: any version
• HP Laserjet 4240: any version
• HP Laserjet 4250: any version
• HP Laserjet 4345 Mfp: any version
• and 16 more

Published 2011-12-01. Last modified 2026-06-16.