How severe is CVE-2001-1040?

CVE-2001-1040 has a CVSS 2.0 base score of 6.4, rated medium severity.

Is CVE-2001-1040 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (82nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2001-1040?

CVE-2001-1040 primarily affects Hp Jetadmin. In total, 9 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2001-1040?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2001-1040 published?

CVE-2001-1040 was published on 2001-08-31 and last updated on 2026-06-16.

CVE-2001-1040

CVE-2001-1040 is a medium-severity vulnerability in Hp Jetadmin with a CVSS 2.0 base score of 6.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 6.4)
EPSS exploit prediction: 2% (82nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Hp Jetadmin
Published: 2001-08-31
Last modified: 2026-06-16

Description

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.

Frequently asked questions

What is CVE-2001-1040?: HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.
How severe is CVE-2001-1040?: CVE-2001-1040 has a CVSS 2.0 base score of 6.4, rated medium severity.
Is CVE-2001-1040 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (82nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2001-1040?: CVE-2001-1040 primarily affects Hp Jetadmin. In total, 9 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2001-1040?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2001-1040 published?: CVE-2001-1040 was published on 2001-08-31 and last updated on 2026-06-16.

References

Affected products (9)

cpe:2.3:a:hp:jetadmin:4.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:jetadmin:4.1.2:*:*:*:*:*:*:*
cpe:2.3:a:hp:jetadmin:5.1:*:*:*:*:*:*:*
cpe:2.3:a:hp:jetadmin:5.5:*:*:*:*:*:*:*
cpe:2.3:a:hp:jetadmin:5.5.177:*:*:*:*:*:*:*
cpe:2.3:a:hp:jetadmin:5.6:*:*:*:*:*:*:*
cpe:2.3:a:hp:jetadmin:6.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:jetadmin:6.1:*:*:*:*:*:*:*
cpe:2.3:a:hp:jetadmin:6.2:*:*:*:*:*:*:*

More vulnerabilities in Hp Jetadmin

CVE-2001-1039 — High (CVSS 7.5): The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is…
CVE-2000-0443 — High (CVSS 7.5): The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot)…
CVE-1999-1433 — High (CVSS 7.2): HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on…
CVE-2000-0444 — Medium (CVSS 5.0): HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.

All CVEs affecting Hp Jetadmin →