CVE-2023-27972
HP Color LaserJet Pro M479fdw cacheddata_http_handler Stack-based Buffer Overflow Remote Code Execution Vulnerability
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the cacheddata_http_handler method. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
*Credits:
Angelboy (@scwuaptx) from DEVCORE Research Team
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-03-08 CVE Reserved
- 2023-04-28 CVE Published
- 2024-08-02 CVE Updated
- 2024-10-08 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.hp.com/us-en/document/ish_7920078-7920104-16/hpsbpi03840 | 2023-05-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hp Search vendor "Hp" | Laserjet Pro M304-m305 W1a46a Firmware Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a46a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a46a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M304-m305 W1a46a Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a46a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M304-m305 W1a47a Firmware Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a47a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a47a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M304-m305 W1a47a Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a47a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M304-m305 W1a48a Firmware Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a48a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a48a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M304-m305 W1a48a Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a48a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M304-m305 W1a66a Firmware Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a66a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a66a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M304-m305 W1a66a Search vendor "Hp" for product "Laserjet Pro M304-m305 W1a66a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M404-m405 93m22a Firmware Search vendor "Hp" for product "Laserjet Pro M404-m405 93m22a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M404-m405 93m22a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M404-m405 93m22a Search vendor "Hp" for product "Laserjet Pro M404-m405 93m22a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a51a Firmware Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a51a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a51a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a51a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a51a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a52a Firmware Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a52a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a52a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a52a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a52a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a53a Firmware Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a53a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a53a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a53a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a53a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a56a Firmware Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a56a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a56a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a56a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a56a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a57a Firmware Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a57a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a57a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a57a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a57a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a58a Firmware Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a58a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a58a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a58a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a58a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a59a Firmware Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a59a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a59a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a59a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a59a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a60a Firmware Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a60a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a60a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a60a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a60a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a63a Firmware Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a63a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a63a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M404-m405 W1a63a Search vendor "Hp" for product "Laserjet Pro M404-m405 W1a63a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y40a Firmware Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y40a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y40a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y40a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y40a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y41a Firmware Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y41a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y41a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y41a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y41a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y43a Firmware Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y43a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y43a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y43a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y43a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y44a Firmware Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y44a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y44a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y44a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y44a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y45a Firmware Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y45a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y45a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y45a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y45a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y46a Firmware Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y46a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y46a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y46a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y46a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y47a Firmware Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y47a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y47a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro M453-m454 W1y47a Search vendor "Hp" for product "Laserjet Pro M453-m454 W1y47a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a29a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a29a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a29a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a29a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a29a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a30a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a30a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a30a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a30a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a30a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a32a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a32a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a32a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a32a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a32a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a34a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a34a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a34a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a34a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a34a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a35a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a35a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a35a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a35a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a35a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a38a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a38a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a38a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 F W1a38a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 F W1a38a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 W1a28a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 W1a28a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 W1a28a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 W1a28a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 W1a28a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 W1a31a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 W1a31a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 W1a31a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 W1a31a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 W1a31a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 W1a33a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 W1a33a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 W1a33a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M428-m429 W1a33a Search vendor "Hp" for product "Laserjet Pro Mfp M428-m429 W1a33a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a75a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a75a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a75a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a75a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a75a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a76a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a76a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a76a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a76a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a76a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a77a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a77a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a77a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a77a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a77a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a78a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a78a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a78a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a78a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a78a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a79a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a79a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a79a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a79a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a79a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a80a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a80a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a80a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a80a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a80a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a81a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a81a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a81a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a81a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a81a" | - | - |
Safe
|
| Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a82a Firmware Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a82a Firmware" | < 002_2310a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a82a Firmware" and version " < 002_2310a" | - |
Affected
| in | Hp Search vendor "Hp" | Laserjet Pro Mfp M478-m479 W1a82a Search vendor "Hp" for product "Laserjet Pro Mfp M478-m479 W1a82a" | - | - |
Safe
|