CVE:CVE-2010-4107
CNNVD:CNNVD-201011-192
HP LaserJet 是美国惠普公司推出的激光打印机系列产品。
HP LaserJet MFP打印机，Color LaserJet MFP打印机，以及LaserJet 4100，4200，4300，5100，8150，及9000型打印机中的File System External Access设置中的PJL Access值的默认配置启用使用该设备文件系统的PJL命令。远程攻击者可以借助打印任务中的命令读取任意文件。该漏洞已经通过目录遍历攻击得到证实。
solution:Upgrade hp 9000 to a higher version than *; Upgrade hp color_laserjet_mfp to a higher version than *; Upgrade hp laserjet_4100 to a higher version than *; Upgrade hp laserjet_4200 to a higher version than *; Upgrade hp laserjet_4300 to a higher version than *; Upgrade hp laserjet_5100 to a higher version than *; Upgrade hp laserjet_8150 to a higher version than *; Upgrade hp laserjet_mfp to a higher version than *