Lucene search
HP Product Security Response TeamHPSBPI03851HistoryJun 22, 2023 - 12:00 a.m.
Certain HP LaserJet Pro Print Products - Potential Remote Code Execution, Information Disclosure
2023-06-2200:00:00
HP Product Security Response Team
support.hp.com
5
hp laserjet pro
code execution
information disclosure
printer firmware
software
ssrf
web service eventing
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
74.6%
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
Update the printer firmware.
Related
zdi
zdi
cve
cve
CVE-2023-35175
2023-06-30 16:15:09
cvelist
cvelist
CVE-2023-35175
2023-06-30 15:43:02
nvd
nvd
CVE-2023-35175
2023-06-30 16:15:09
prion
prion
Server side request forgery (ssrf)
2023-06-30 16:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
74.6%
Related for HPSBPI03851