Lucene search

HP Product Security Response TeamHPSBPI03837

HistoryMar 27, 2023 - 12:00 a.m.

Certain DesignJet and PageWide XL products - Potential information disclosure

2023-03-2700:00:00

HP Product Security Response Team

support.hp.com

firmware updates

information disclosure

hard disk drive

taa compliant

printer

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

21.6%

JSON

Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer.

HP has provided firmware updates to resolve the issue for the potentially affected products listed in the table below.

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

21.6%

JSON

Related for HPSBPI03837