HP Color LaserJet CP4020 / CP4025 / CP4525 Printer Firmware Upgrade Utility 07_110_2B

IMPORTANT NOTE:

“This firmware version installs code signing verification functionality. Firmware signed by HP guarantees the integrity and authenticity of the code; meaning that the firmware was produced by HP (authenticity) and that the firmware has not been altered in any way (integrity). “

ATTENTION:

Once this firmware has been applied to your printer or multifunction device it CANNOT BE DOWNGRADED to a previous version of firmware.

BACKGROUND:

It is important to note that Code Signing Verification functionality has been provided with this version of firmware and will be provided with all future versions of firmware, therefore, the ability to downgrade to a previous version of firmware no longer exists.

Product Name(s):

HP Color LaserJet CP4525 and CP4025 Printer Series

Model Number(s):

CC489A, CC490A, CC493A, CC494A, CC495A

ENHANCEMENTS:

- Base Product:
No new updates.

- Embedded Digital Sending:
No new updates.

- Embedded JetDirect:
Secure@Install support is now available
802.1x failure to negotiate disables networking
SNMPv3 privacy and authentication use keys rather than passphrases
No SSL Proxy available to Auto-Send

FIXES OR IMPROVEMENTS:

This firmware provides fixes or improvements for following issues:

- Base Product:
We now have the ability to allow the time server to be set to a specific IP address.
DST offset value is getting added while setting the time to a time which falls in daylight time saving period.
Cannot see modified custom media type names via the PML MEDIA1-NAME object
You may see a hang occur when Printing a Menu Map Page in the Chinese langauge.
Personal jobs are not getting deleted even after the job held timeout expires

- Embedded Digital Sending:
No new updates.

- Embedded JetDirect:
SSL vulnerable to a man-in-the-middle renegotiation attack
Certificate Signing Requests specify 1024 bit keys; should specify 2048 bit keys
The default key size for Certificate Signing Requests should be 2048 bits not, 1024
A "Reflected XSS" is possible due to redirection to HTTPS
Crash results when navigating to Refresh Rate in Networking pages
Crash results when a duplicate IPv6 address is encountered
SSL vulnerable to a Cipersuite downgrade attack
Telnet crashes
Misbehavior when DHCP NAK received