Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HP Web Jetadmin固件升级脚本远程文件上传漏洞
Vulnerability Description
HP Web JetAdmin具有一个整合式的修改的Apache Web服务器。 HP Web Jetadmin包含的固件升级脚本存在问题,远程攻击者可以利用这个脚本上传任意文件到服务器。 使用/plugins/hpjwja/script/devices_update_printer_fw_upload.hts HTS脚本,任何文件可上传到 " target="_blank">https://victim:8443/plugins/hpjwja/firmware/printer/<filename> 目录
CVSS Information
N/A
Vulnerability Type
N/A