HP Jetdirect vulnerabilities

9 CVEs affecting HP Jetdirect, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-1772, published 2007-03-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-1048, published 2002-10-04. High severity, CVSS 7.5. EPSS: 13.5% chance of exploitation in the next 30 days. HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP request to the variable (.iso.3.6.1.4.1.11.2.3.9.4.2.1.3.9.1.1.0.
CVE-2000-0636, published 2000-07-19. Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days. HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command.
CVE-1999-1061, published 1997-10-04. High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days. HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or…
CVE-2000-1062, published 2000-12-11. Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days. Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
CVE-2000-1063, published 2000-12-11. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
CVE-2000-1064, published 2000-12-11. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
CVE-2007-1772, published 2007-03-30. High severity, CVSS 7.1. EPSS: 2.9% chance of exploitation in the next 30 days. The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a RETR command with a long pathname.
CVE-2000-1065, published 2000-12-11. Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days. Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet.
CVE-1999-1062, published 1997-10-04. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100.