• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1095
  • Last Modified:

Can we check firmware of HP Laserjets by telnet into JetDirect and Laserjet vulnerability

Hi,

This is a 2 issue question :

Q1 :
As we have almost 90 Laserjets, can I remotely telnet into them to
check the version of firmware of the Laserjets : don't want to physically
go to each Jetdirect's LCD panel to check this as too tedious.  Or is there
a tool/utility from HP that I can use to poll or remote check their versions?

Q2 :
how do I addres the vulnerability reported below :

========================================================

[ Summary ]
A potential security vulnerability has been identified with certain HP
LaserJet printers, HP Color LaserJet printers and HP Digital Senders. The
vulnerability could be exploited remotely to gain unauthorized access to
files.

[ Affected Systems ]
HP LaserJet 2410 with firmware prior to 20080819 SPCL112A
HP LaserJet 2420 with firmware prior to 20080819 SPCL112A
HP LaserJet 2430 with firmware prior to 20080819 SPCL112A
HP LaserJet 4250 with firmware prior to 20080819 SPCL015A
HP LaserJet 4350 with firmware prior to 20080819 SPCL015A
HP LaserJet 9040 with firmware prior to 20080819 SPCL110A
HP LaserJet 9050 with firmware prior to 20080819 SPCL110A
HP LaserJet 4345mfp with firmware prior to 09.120.9
HP Color LaserJet 4730mfp with firmware prior to 46.200.9
HP LaserJet 9040mfp with firmware prior to 08.110.9
HP LaserJet 9050mfp with firmware prior to 08.110.9
HP 9200C Digital Sender with firmware prior to 09.120.9
HP Color LaserJet 9500mfp with firmware prior to 08.110.9

[ Impact Analysis ]
Remote unauthorized access to files

[ Solution/Workaround ]
HP has provided firmware updates and preliminary firmware updates to
resolve this vulnerability.


[ Reference ]
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905
0
sunhux
Asked:
sunhux
  • 2
2 Solutions
 
Alex AppletonBusiness Technology AnalystCommented:
Just go into their built in webpage, it will tell you the firmware version in there.
0
 
sunhuxAuthor Commented:

So just do "http://JetDirect_IP_address"   ?
Is the firmware version shown on the very first/main page ?
0
 
Alex AppletonBusiness Technology AnalystCommented:
yes.  Usually it will take some digging around to find the firmware version but sometimes it shows on the main page.  It will vary depending on the model.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now