Title: HP LaserJet P3015 Embedded Web Server Traversal Arbitrary File Access
Jan 10, 2012
Jan 09, 2012
HP LaserJet P3015 contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the embedded web server not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../). This directory traversal attack would allow the attacker to read arbitrary files.
Remote / Network Access
Loss of Confidentiality
Upgrade to version 07.080.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.