HP LaserJet Printers Path Traversal (CVE-2010-4107)

high Tenable OT Security Plugin ID 505353

Synopsis

The remote OT asset is affected by a vulnerability.

Description

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

Refer to the vendor advisory.

Plugin Details

Severity: High

ID: 505353

File Name: tenable_ot_hp_CVE-2010-4107.nasl

Version: 1.2

Type: Remote

Family: Tenable.ot

Published: 5/26/2026

Updated: 5/28/2026

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2010-4107

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/h:hp:laserjet_mfp

Required KB Items: Tenable.ot/HP

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/17/2010

Vulnerability Publication Date: 11/17/2010

Reference Information

CVE: CVE-2010-4107

CWE: 22

Detections

Analytics