CVSS: 9.8EPSS: 0%CPEs: 1914EXPL: 0CVE-2023-1329
https://notcve.org/view.php?id=CVE-2023-1329
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products. • https://support.hp.com/us-en/document/ish_8585737-8585769-16/hpsbpi03849 •
CVSS: 9.8EPSS: 0%CPEs: 5821EXPL: 0CVE-2021-3942
https://notcve.org/view.php?id=CVE-2021-3942
Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR. Ciertos productos HP Print y productos Digital Sending pueden ser vulnerables a una posible ejecución remota de código y desbordamiento de búfer con el uso de resolución de nombres de multidifusión local de enlace o LLMNR. • https://support.hp.com/us-en/document/ish_5948778-5949142-16/hpsbpi03780 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 394EXPL: 0CVE-2018-5921
https://notcve.org/view.php?id=CVE-2018-5921
A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege. Se ha identificado una potencial vulnerabilidad de seguridad en ciertas impresoras HP y MFP en versiones de firmware 2405129_000052 y otras. Esta vulnerabilidad se conoce como Cross-Site Request Forgery (CSRF) y podría explotarse remotamente para permitir la elevación de privilegios. • https://support.hp.com/us-en/document/c05949322 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 9.8EPSS: 0%CPEs: 488EXPL: 0CVE-2017-2750
https://notcve.org/view.php?id=CVE-2017-2750
Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937_578479, 2405087_018548, and other firmware versions. Una validación insuficiente de firmas de soluciones DLL permite la ejecución potencial de código arbitrario en impresoras HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed y HP OfficeJet Enterprise en versiones anteriores a la 2308937_578479, 2405087_018548 y otras. • http://www.securityfocus.com/bid/101965 https://support.hp.com/us-en/document/c05839270 • CWE-20: Improper Input Validation •