TI-2013-04216 Aliases CVE-2013-4807 GHSA-hw48-wq5r-qc92

Unspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn, M1212nf MFP, M1213nf…

MEDIUM 41Published 2013-08-04 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · Complete · None
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn, M1212nf MFP, M1213nf MFP, M1214nfh MFP, M1216nfh MFP, M1217nfw MFP, M1218nfs MFP, and CP1025nw with firmware before 2013-07-26 20130703 allows remote attackers to modify data via unknown vectors.

Why it matters now

EPSS 0.04158 90th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 20

CPE	Versions	Role	Vendor
cpe:2.3:h:hp:laserjet_pro_cp1025nw_firmware:20130703:::::::*	20130703	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_cp1025nw:ce914a:::::::*	ce914a	Running on	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_cp1025nw:ce918a:::::::*	ce918a	Running on	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1214nfh_mfp_firmware:20130703:::::::*	20130703	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1214nfh_mfp:ce842a:::::::*	ce842a	Running on	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_p1606dn_firmware:20130212:::::::*	20130212	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_p1606dn:ce749a:::::::*	ce749a	Running on	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1216nfh_multifunction_printer_firmware:20130703:::::::*	20130703	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1216nfh_multifunction_printer:ce843a:::::::*	ce843a	Running on	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1213nf_mfp_firmware:20130703:::::::*	20130703	Vulnerable	Hewlett Packard Enterprise

cpe:2.3:h:hp:laserjet_pro_cp1025nw_firmware:20130703:*:*:*:*:*:*:* Versions 20130703 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_cp1025nw:ce914a:*:*:*:*:*:*:* Versions ce914a Running on ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_cp1025nw:ce918a:*:*:*:*:*:*:* Versions ce918a Running on ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1214nfh_mfp_firmware:20130703:*:*:*:*:*:*:* Versions 20130703 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1214nfh_mfp:ce842a:*:*:*:*:*:*:* Versions ce842a Running on ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_p1606dn_firmware:20130212:*:*:*:*:*:*:* Versions 20130212 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_p1606dn:ce749a:*:*:*:*:*:*:* Versions ce749a Running on ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1216nfh_multifunction_printer_firmware:20130703:*:*:*:*:*:*:* Versions 20130703 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1216nfh_multifunction_printer:ce843a:*:*:*:*:*:*:* Versions ce843a Running on ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1213nf_mfp_firmware:20130703:*:*:*:*:*:*:* Versions 20130703 Vulnerable ·Hewlett Packard Enterprise

Show 10 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:h:hp:laserjet_pro_m1213nf_mfp:ce845a:::::::*	ce845a	Running on	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1212nf_mfp_firmware:20130703:::::::*	20130703	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1212nf_mfp:ce841a:::::::*	ce841a	Running on	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1217nfw_multifunction_printer_firmware:20130703:::::::*	20130703	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1217nfw_multifunction_printer:ce844a:::::::*	ce844a	Running on	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_p1102w_firmware:20130703:::::::*	20130703	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_p1102w:ce657a:::::::*	ce657a	Running on	Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_p1102w:ce658a:::::::*	ce658a	Running on	Hewlett Packard Enterprise
cpe:2.3:h:hp:hotspot_laserjet_pro_m1218nfs_mfp_firmware:20130703:::::::*	20130703	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:hotspot_laserjet_pro_m1218nfs_mfp:b4k88a:::::::*	b4k88a	Running on	Hewlett Packard Enterprise

cpe:2.3:h:hp:laserjet_pro_m1213nf_mfp:ce845a:*:*:*:*:*:*:* Versions ce845a Running on ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1212nf_mfp_firmware:20130703:*:*:*:*:*:*:* Versions 20130703 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1212nf_mfp:ce841a:*:*:*:*:*:*:* Versions ce841a Running on ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1217nfw_multifunction_printer_firmware:20130703:*:*:*:*:*:*:* Versions 20130703 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_m1217nfw_multifunction_printer:ce844a:*:*:*:*:*:*:* Versions ce844a Running on ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_p1102w_firmware:20130703:*:*:*:*:*:*:* Versions 20130703 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_p1102w:ce657a:*:*:*:*:*:*:* Versions ce657a Running on ·Hewlett Packard Enterprise
cpe:2.3:h:hp:laserjet_pro_p1102w:ce658a:*:*:*:*:*:*:* Versions ce658a Running on ·Hewlett Packard Enterprise
cpe:2.3:h:hp:hotspot_laserjet_pro_m1218nfs_mfp_firmware:20130703:*:*:*:*:*:*:* Versions 20130703 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:hotspot_laserjet_pro_m1218nfs_mfp:b4k88a:*:*:*:*:*:*:* Versions b4k88a Running on ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2013-4807
2026-10-03 Alias added: GHSA-hw48-wq5r-qc92

References

Advisory 1

SSRT101181

Other 1

95907

TI-2012-04401 Unspecified vulnerability on the HP LaserJet Pro M1212nf, M1213nf, M1214nfh, M1216nfh… CVSS 2.0HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences