CVE-1999-1061

High

Published: 04/10/1997(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.78%

89th percentile - higher than 89% of all known CVEs

Summary

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be set without a password, allowing remote attackers to connect to the printer and change its IP address or disable logging.

Risk Assessment

The lack of a password for the printer poses a risk of unauthorized access, which could lead to changes in network settings and loss of monitoring capabilities.

Recommendation

It is recommended to configure printers with a password and regularly update the firmware to minimize the risk of unauthorized access.

Other vulnerabilities in HP Laserjet printers with JetDirect cards

CVE-1999-1062High
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100.

Original NVD description (English source)

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging.