What is the CVSS score of CVE-2013-4829?

CVE-2013-4829 has a CVSS 2.0 base score of 1.5 (Low). CVSS vector: AV:L/AC:M/Au:S/C:P/I:N/A:N. EPSS exploitation probability: 0.1%.

Color Laserjet Cm4540 CVE-2013-4829

LOW

Information Exposure (CWE-200)

2013-10-04 hp-security-alert@hp.com

Information Disclosure HP Color Laserjet Cm4540 Color Laserjet Cm4540F Color Laserjet Cm4540Fskm Color Laserjet M575Dn Color Laserjet M575F Color Laserjet M775Dn Color Laserjet M775F Color Laserjet M775Z Laserjet Enterprise Color Flow M575C Laserjet Flow M525C Laserjet M4555 Laserjet M4555F Laserjet M4555Fskm Laserjet M4555H Laserjet M525Dn Laserjet M525F Laserjet M725Dn Laserjet M725F Laserjet M725Z Scanjet Enterprise 8500Fn1

1.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

1.5 LOW

AV:L/AC:M/Au:S/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:S/C:P/I:N/A:N

Attack Vector

Local

Attack Complexity

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Oct 04, 2013 - 10:44 cve.org

LOW 1.5

DescriptionCVE.org

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors.

AnalysisAI

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow. Rated low severity (CVSS 1.5). No vendor patch available.

Technical ContextAI

This vulnerability is classified as Exposure of Sensitive Information (CWE-200), which allows attackers to access sensitive data that should not be disclosed. HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors. Affected products include: Hp Color Laserjet Cm4540, Hp Color Laserjet Cm4540F, Hp Color Laserjet Cm4540Fskm, Hp Color Laserjet M575Dn, Hp Color Laserjet M575F.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Minimize information in error messages, implement proper access controls, encrypt sensitive data at rest and in transit.