Is CVE-2010-4107 being actively exploited?

CVE-2010-4107 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2010-4107?

CVE-2010-4107 has a CVSS 2.0 base score of 7.8 (HIGH).

CVE-2010-4107

HIGH · CVSS 7.8EPSS 13.2%EU EUVD

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.

Key facts

CVSS score: 7.8 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Weakness (CWE): CWE-22
EPSS score: 13.2% (96th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2010-4083)
Published: November 17, 2010
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2010-4083 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

hp / 9000
hp / color laserjet mfp
hp / laserjet 4100
hp / laserjet 4200
hp / laserjet 4300
hp / laserjet 5100
hp / laserjet 8150
hp / laserjet mfp

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

HP StorageWorks P9000 Command View Advanced Edition Software Common Component Version: 7.0.1-00 - Hewlett-Packard Company - Common Criteria JISEC-CC-CRP-C0305 - archived

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain