HP Color LaserJet CP3525 Printer Firmware for Single/Multiple Printers 06.130.0B

IMPORTANT NOTE:

This firmware version installs code signing verification functionality. Firmware signed by HP guarantees the integrity and authenticity of the code; meaning that the firmware was produced by HP (authenticity) and that the firmware has not been altered in any way (integrity).

ATTENTION:

Once this firmware has been applied to your printer or multifunction device it CANNOT BE DOWNGRADED to a previous version of firmware.

BACKGROUND:

It is important to note that Code Signing Verification functionality has been provided with this version of firmware and will be provided with all future versions of firmware, therefore, the ability to downgrade to a previous version of firmware no longer exists.

Product Name(s):

HP Color LaserJet CP3525

Model Number(s):

CC468A, CC469A, CC470A, CC471A

The utility will use the current print path or connection of your selected printer. If it is connected via USB, the utility uses that path and if it is connected to the network, it will use the network path. The utility does not require the use of the Windows spooler (enabled by default).

Enhancements

- Base Product:
Ability to change control panel message when the service request is raised
The ability to retain Personal Stored Jobs through a Power Cycle.

- Embedded Jet Direct:
Secure@Install support is now available
802.1x failure to negotiate disables networking
SNMPv3 privacy and authentication use keys rather than passphrases
No SSL Proxy available to Auto-Send

Fixes or improvements

This firmware provides fixes or improvements for following issues:

- Base Product:
No new updates

- Embedded Jet Direct:
SSL vulnerable to a man-in-the-middle renegotiation attack
Certificate Signing Requests specify 1024 bit keys; should specify 2048 bit keys
The default key size for Certificate Signing Requests should be 2048 bits not, 1024
A "Reflected XSS" is possible due to redirection to HTTPS
Crash results when navigating to Refresh Rate in Networking pages
Crash results when a duplicate IPv6 address is encountered
SSL vulnerable to a Cipersuite downgrade attack
Telnet crashes
Misbehavior when DHCP NAK received