peter bassill · operator
$ cve CVE-2006-1654 JSON

CVE-2006-1654 EXPLOIT

5.0
MEDIUM · CVSS 2.0 · EPSS 4.8% (pctl 92)

Patch early

A public exploit exists.

Description

Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.

Scoring

CVSS5.0 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS4.75% — more likely to be exploited than 92% of all CVEs
On CISA KEVno
Public exploityes
Published2006-04-06
Last modified2026-06-16

Affected (9)

VendorProduct
hpcolor laserjet
hpcolor laserjet 2500
hpcolor laserjet 2500 toolbox
hpcolor laserjet 2500l
hpcolor laserjet 2500lse
hpcolor laserjet 2500n
hpcolor laserjet 2500tn
hpcolor laserjet 4600
hpcolor laserjet 4600 toolbox

Public exploits

SourceTitleDate
exploit-dbHP Color LaserJet 2500/4600 Toolbox - Directory Traversal2006-04-03

References

→ the Explorer  ·  watch your stack  ·  NVD