CVE-2011-1533: Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosma...

Security readout for executives and security teams

This old HP printer vulnerability involves cross-site scripting in several Photosmart and ENVY models. A remote attacker could inject script or HTML through unspecified vectors. The public bundle does not provide CVSS, firmware ranges, authentication requirements, or confirmed exploitation, so urgency depends on whether these legacy printers remain reachable in your environment. Exposure is most likely in environments still using the named legacy HP printer models, especially where printer web functions are reachable from user or untrusted networks. The bundle’s affected product metadata is incomplete, so asset confirmation is required. Treat this as a legacy asset exposure issue rather than a confirmed emergency. Prioritize discovery and isolation if affected printers are still deployed, because the public evidence is incomplete and no active exploitation is cited. Mitigation focus: Inventory for the named HP printer models.; Check HP advisory HPSBPI02656 for vendor-supported fixes or guidance.; Limit access to printer web interfaces to trusted networks..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.