CVE-2006-1654

medium HPE
CVSS v3 Base Score
5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS Score
10.3%
Exploitation probability in 30 days
Top 7% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
None
Availability
None
Published: April 6, 2006 (7343 days ago)
Last Modified: April 16, 2026
Vendor: HPE
Source: NVD

Description

Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.

CWE

NVD-CWE-Other

Affected Products

hp color laserjet 2500 toolboxhp color laserjet 4600 toolboxhp color laserjethp color laserjet 2500hp color laserjet 2500lhp color laserjet 2500lsehp color laserjet 2500nhp color laserjet 2500tnhp color laserjet 4600

References

🔗 archives.neohapsis.com 🔗 secunia.com 🔗 securitytracker.com 🔗 www.osvdb.org 🔗 www.securityfocus.com