CVSS: 10.0EPSS: 0%CPEs: 76EXPL: 0CVE-2023-27972 – HP Color LaserJet Pro M479fdw cacheddata_http_handler Stack-based Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-27972
28 Apr 2023 — Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the cacheddata_http_handler method. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed... • https://support.hp.com/us-en/document/ish_7920078-7920104-16/hpsbpi03840 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 10.0EPSS: 0%CPEs: 76EXPL: 0CVE-2023-27971 – HP Color LaserJet Pro M479fdw msws Probe Message Stack-based Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-27971
28 Apr 2023 — Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Probe messages. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-le... • https://support.hp.com/us-en/document/ish_7919962-7920003-16/hpsbpi03839 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 10.0EPSS: 3%CPEs: 5821EXPL: 0CVE-2021-3942
https://notcve.org/view.php?id=CVE-2021-3942
22 Nov 2022 — Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR. Ciertos productos HP Print y productos Digital Sending pueden ser vulnerables a una posible ejecución remota de código y desbordamiento de búfer con el uso de resolución de nombres de multidifusión local de enlace o LLMNR. • https://support.hp.com/us-en/document/ish_5948778-5949142-16/hpsbpi03780 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 20%CPEs: 138EXPL: 0CVE-2022-24292 – HP LaserJet Pro MFP M283fdw CFF Font Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2022-24292
23 Mar 2022 — Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. Algunos dispositivos de impresión de HP pueden ser vulnerables a una divulgación potencial de información, una denegación de servicio o a una ejecución de código remota This vulnerability allows remote attackers to disclose sensitive information on affected installations of HP LaserJet Pro MFP M283fdw printers. Authentication is not required to exploit this vulnerability. The specific... • https://support.hp.com/us-en/document/ish_5950417-5950443-16 •
CVSS: 10.0EPSS: 20%CPEs: 138EXPL: 0CVE-2022-24293 – HP LaserJet Pro MFP M283fdw eContactRestore Stack-based Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-24293
23 Mar 2022 — Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. Algunos dispositivos de impresión de HP pueden ser vulnerables a una divulgación potencial de información, una denegación de servicio o a una ejecución de código remota This vulnerability allows remote attackers to execute arbitrary code on affected installations of HP LaserJet Pro MFP M283fdw printers. Although authentication is required to exploit this vulnerability, the existing au... • https://support.hp.com/us-en/document/ish_5950417-5950443-16 •
CVSS: 7.8EPSS: 12%CPEs: 138EXPL: 0CVE-2022-24291 – HP LaserJet Pro MFP M283fdw ScanJobs Memory Corruption Denial-of-Service Vulnerability
https://notcve.org/view.php?id=CVE-2022-24291
23 Mar 2022 — Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. Algunos dispositivos de impresión de HP pueden ser vulnerables a una posible divulgación de información, denegación de servicio o ejecución de código remota This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of HP LaserJet Pro MFP M283fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw ... • https://support.hp.com/us-en/document/ish_5950417-5950443-16 •
CVSS: 8.8EPSS: 0%CPEs: 1523EXPL: 0CVE-2020-28419
https://notcve.org/view.php?id=CVE-2020-28419
09 Nov 2021 — During installation with certain driver software or application packages an arbitrary code execution could occur. Durante la instalación con determinados paquetes de software de controladores o aplicaciones podría producirse una ejecución de código arbitrario • https://support.hp.com/us-en/document/c07058567 •
CVSS: 7.8EPSS: 0%CPEs: 27EXPL: 0CVE-2019-18912
https://notcve.org/view.php?id=CVE-2019-18912
09 Nov 2021 — A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart Firmware bundle version 4.9 or 4.9.0.1 the potential vulnerability may cause instability in the solution. Se ha identificado una potencial vulnerabilidad de seguridad para determinadas impresoras y MFPs de HP con soluciones Troy. Para las impresoras afectadas con la versión 4.9 o 4.9.0.1 del paquete de firmware FutureSmart, una posible vulnerabilidad puede causa... • https://support.hp.com/us-en/document/c06513924 •
CVSS: 6.1EPSS: 0%CPEs: 867EXPL: 0CVE-2019-18914
https://notcve.org/view.php?id=CVE-2019-18914
09 Nov 2021 — A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link. Se ha identificado una potencial vulnerabilidad de seguridad para determinadas impresoras y MFPs de HP que permitiría una redirección de página de tipo Cross-Site Scripting en el navegador de un cliente al hacer clic en un enlace malicioso de terceros • https://support.hp.com/us-en/document/c06546034 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2019-18916
https://notcve.org/view.php?id=CVE-2019-18916
09 Nov 2021 — A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printers) which may lead to unauthorized elevation of privilege on the client. Se ha identificado una posible vulnerabilidad de seguridad en HP LaserJet Solution Software (para determinadas impresoras HP LaserJet) que puede conllevar a una elevación de privilegios no autorizada en el cliente • https://support.hp.com/us-en/document/c06586963 • CWE-269: Improper Privilege Management •