CVE-2009-3555 HP Laserjet Vulnerability

[brianlanders]

Qualys has spit out the following CVE vulnerability for a majority of my HP Laserjet printers in my environment.

CVE-2009-3555

Transport Layer Security (TLS) is a cryptographic protocol that provides security for communications over networks at the Transport Layer. TLS protocol is prone to a security vulnerability that allows for man-in-the-middle attacks. Note that this issue does not allow attackers to decrypt encrypted data Specifically, the issue exists in a way applications handle the session renegotiation process and may allow attackers to inject arbitrary plaintext into the beginning of application protocol stream. The attack has been confirmed to work with HTTP as the application protocol but it is believed to be also possible with other protocols that are layered on TLS.General remote services

Most of the models are the M402 and M452. They are using the latest drivers and firmware.

Please let me know what I can do to resolve this security vulnerability in my environment. 

Thank You

[Repairatrooper]

Is the firmware up to date on your machines?

[brianlanders]

Yes latest firmware and drivers