CVE-2011-4161
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx,...
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.
Exploit likelihood
What each source reports
NVD Score used
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.
- Record
CVE-2011-4161- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.
- Record
CVE-2011-4161- Updated
- 2026-11-02
EUVDEUVD-2011-4104 No score
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.
- Record
EUVD-2011-4104- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vv8q-r8fx-pgjx No score
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx,...
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.
- Record
GHSA-vv8q-r8fx-pgjx- Updated
- 2026-11-02
Affected products
- hp digital sender 9200c
- hp laserjet enterprise 500 color
- hp color laserjet 3000
- hp color laserjet 3800
- hp color laserjet 4700
- hp color laserjet 4730
- hp color laserjet 4730 mfp
- hp color laserjet 5550
- hp color laserjet 9500
- hp color laserjet cm3530
- hp color laserjet cm4540
- hp color laserjet cm4730
Show 29 moreShow less
- hp color laserjet cm6030
- hp color laserjet cm6040
- hp color laserjet cp3505
- hp color laserjet cp3525
- hp color laserjet cp4005
- hp color laserjet cp5525
- hp color laserjet cp6015
- hp color laserjet enterprise cp4520
- hp color laserjet enterprise cp4525
- hp color mfp cm8060
- hp digital sender 9250c
- hp laserjet 4240
- hp laserjet 4250
- hp laserjet 4345 mfp
- hp laserjet 4350
- hp laserjet 5200
- hp laserjet 9040
- hp laserjet 9050
- hp laserjet enterprise 600
- hp laserjet enterprise m4555
- hp laserjet enterprise p3015
- hp laserjet m3035
- hp laserjet m5035
- hp laserjet m9040
- hp laserjet m9050
- hp laserjet p3005
- hp laserjet p4014
- hp laserjet p4015
- hp laserjet p4515
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4161 is a high vulnerability (CVSS 10.0) in Hp Digital Sender 9200c, published December 1, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.1%, the 96th percentile. No source names a fixed version.
References
kb.cert.org/vuls/id/717921
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03102449
isc.sans.org/diary/Hacking+HP+Printers+for+Fun+and+Profit/12112
redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say
secunia.com/advisories/47063
securitytracker.com/id?1026357