What is the CVSS score of CVE-2012-5221?

CVE-2012-5221 has a CVSS 2.0 base score of 5.0 (Medium). CVSS vector: AV:N/AC:L/Au:N/C:P/I:N/A:N. EPSS exploitation probability: 2.1%.

Color Laserjet 3000 CVE-2012-5221

MEDIUM

2013-04-29 hp-security-alert@hp.com

Path Traversal HP Color Laserjet 3000 Color Laserjet 3800 Color Laserjet 4700 Color Laserjet 4730 Mfp Color Laserjet 5550 Color Laserjet 9500 Mfp Color Laserjet Cm6030 Mfp Color Laserjet Cm6040 Mfp Color Laserjet Cp3505 Color Laserjet Cp3525 Color Laserjet Cp4005 Color Laserjet Cp6015 Color Laserjet Enterprise Cp4025 Color Laserjet Enterprise Cp4525 Digital Sender 9250C Laserjet 4240 Laserjet 4250 Laserjet 4345 Mfp Laserjet 4350 Laserjet 5200L Laserjet 5200N Laserjet 9040 Laserjet 9040 Mfp Laserjet 9050 Laserjet 9050 Mfp Laserjet Enterprise P3015 Laserjet M3027 Mfp Laserjet M3035 Mfp Laserjet M4345 Mfp Laserjet M5025 Mfp Laserjet M5035 Mfp Laserjet M9040 Mpf Laserjet M9050 Mpf Laserjet P3005 Laserjet P4014 Laserjet P4015 Laserjet P4515

5.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:P/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Apr 29, 2013 - 21:55 cve.org

MEDIUM 5.0

DescriptionCVE.org

AnalysisAI

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors. Affected products include: Hp Color Laserjet 3000, Hp Color Laserjet 3800, Hp Color Laserjet 4700, Hp Color Laserjet 4730 Mfp, Hp Color Laserjet 5550. Version information: through 52..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.