What is the CVSS score of CVE-2013-4807?

CVE-2013-4807 has a CVSS 2.0 base score of 7.8 (High). CVSS vector: AV:N/AC:L/Au:N/C:N/I:C/A:N. EPSS exploitation probability: 1.5%.

Laserjet Pro Cp1025Nw Firmware CVE-2013-4807

HIGH

2013-08-05 hp-security-alert@hp.com

Information Disclosure HP Laserjet Pro Cp1025Nw Firmware Laserjet Pro M1214Nfh Mfp Firmware Laserjet Pro P1606Dn Firmware Laserjet Pro M1216Nfh Multifunction Printer Firmware Laserjet Pro M1213Nf Mfp Firmware Laserjet Pro M1212Nf Mfp Firmware Laserjet Pro M1217Nfw Multifunction Printer Firmware Laserjet Pro P1102W Firmware Hotspot Laserjet Pro M1218Nfs Mfp Firmware

7.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:N/AC:L/Au:N/C:N/I:C/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:C/A:N

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Aug 05, 2013 - 13:22 cve.org

HIGH 7.8

DescriptionCVE.org

AnalysisAI

Unspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn, M1212nf MFP, M1213nf MFP, M1214nfh MFP, M1216nfh MFP, M1217nfw MFP, M1218nfs MFP, and CP1025nw with firmware before 2013-07-26. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

Unspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn, M1212nf MFP, M1213nf MFP, M1214nfh MFP, M1216nfh MFP, M1217nfw MFP, M1218nfs MFP, and CP1025nw with firmware before 2013-07-26 20130703 allows remote attackers to modify data via unknown vectors. Affected products include: Hp Laserjet Pro Cp1025Nw Firmware, Hp Laserjet Pro M1214Nfh Mfp Firmware, Hp Laserjet Pro P1606Dn Firmware, Hp Laserjet Pro M1216Nfh Multifunction Printer Firmware, Hp Laserjet Pro M1213Nf Mfp Firmware. Version information: before 2013.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.