CVE-2004-2439
MEDIUM · CVSS 5.0EPSS 2.2%EU EUVD
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.
Key facts
- CVSS score
- 5.0 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:L/Au:N/C:N/I:P/A:N- EPSS score
- 2.2% (82th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2004-2430)
- Published
- December 31, 2004
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2004-2430 in the EU Vulnerability Database. Last updated in EUVD on August 8, 2024.
View on the EU Vulnerability DatabaseAffected products
- hp / color laserjet
- hp / color laserjet
- hp / color laserjet
- hp / color laserjet 4600
- hp / laserjet 2500
- hp / laserjet 3000
- hp / laserjet 3700
- hp / laserjet 4100 mfp
- hp / laserjet 4200
- hp / laserjet 4300
- hp / laserjet 9000
- hp / laserjet 9000 mfp
- hp / laserjet 9040 mpf
- hp / laserjet 9050
- hp / laserjet 9050 mpf
- hp / laserjet 9055
- hp / laserjet 9065
- hp / laserjet 9500
- hp / laserjet 9500 mpf
Certified products that may be affected
1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.
- Hewlett Packard HP LaserJet 9040 MFP System Firmware Version 08.091.3, HP LaserJet 9050 MFP System Firmware Version 08.091.3, HP LaserJet 4345 MFP System Firmware Version 09.091.4, HP Color LaserJet CM4730 MFP System Firmware Version 50.021.4 - Hewlett-Packard Company - Common Criteria CCEVS-VR-VID-10297-2008 - archived
References
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain