What is the CVSS score of CVE-2013-4828?

CVE-2013-4828 has a CVSS 2.0 base score of 4.3 (Medium). CVSS vector: AV:N/AC:M/Au:N/C:P/I:N/A:N. EPSS exploitation probability: 0.6%.

Color Laserjet Cm4540 CVE-2013-4828

MEDIUM

Cryptographic Issues (CWE-310)

2013-10-04 hp-security-alert@hp.com

Information Disclosure HP Color Laserjet Cm4540 Color Laserjet Cm4540F Color Laserjet Cm4540Fskm Color Laserjet M575Dn Color Laserjet M575F Color Laserjet M775Dn Color Laserjet M775F Color Laserjet M775Z Laserjet Enterprise Color Flow M575C Laserjet Flow M525C Laserjet M4555 Laserjet M4555F Laserjet M4555Fskm Laserjet M4555H Laserjet M525Dn Laserjet M525F Laserjet M725Dn Laserjet M725F Laserjet M725Z Scanjet Enterprise 8500Fn1

4.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:M/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:N/A:N

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Oct 04, 2013 - 10:44 cve.org

MEDIUM 4.3

DescriptionCVE.org

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via unspecified vectors.

AnalysisAI

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-310. HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via unspecified vectors. Affected products include: Hp Color Laserjet Cm4540, Hp Color Laserjet Cm4540F, Hp Color Laserjet Cm4540Fskm, Hp Color Laserjet M575Dn, Hp Color Laserjet M575F.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.