Server side request forgery (ssrf)

2023-06-3016:15:00

PRIOn knowledge base

www.prio-n.com

server-side request forgery

potential remote code execution

elevation of privilege

web service eventing

nvd

9.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.6%

JSON

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.

CPENameOperatorVersion
laserjet_pro_m304-m305_w1a46a_firmwareeq< 2-2322c
laserjet_pro_m304-m305_w1a47a_firmwareeq< 2-2322c
laserjet_pro_m304-m305_w1a48a_firmwareeq< 2-2322c
laserjet_pro_m304-m305_w1a66a_firmwareeq< 2-2322c
laserjet_pro_m404-m405_93m22a_firmwareeq< 2-2322c
laserjet_pro_m404-m405_w1a51a_firmwareeq< 2-2322c
laserjet_pro_m404-m405_w1a52a_firmwareeq< 2-2322c
laserjet_pro_m404-m405_w1a53a_firmwareeq< 2-2322c
laserjet_pro_m404-m405_w1a56a_firmwareeq< 2-2322c
laserjet_pro_m404-m405_w1a57a_firmwareeq< 2-2322c

Name	Operator	Version
laserjet_pro_m304-m305_w1a46a_firmware	eq	< 2-2322c
laserjet_pro_m304-m305_w1a47a_firmware	eq	< 2-2322c
laserjet_pro_m304-m305_w1a48a_firmware	eq	< 2-2322c
laserjet_pro_m304-m305_w1a66a_firmware	eq	< 2-2322c
laserjet_pro_m404-m405_93m22a_firmware	eq	< 2-2322c
laserjet_pro_m404-m405_w1a51a_firmware	eq	< 2-2322c
laserjet_pro_m404-m405_w1a52a_firmware	eq	< 2-2322c
laserjet_pro_m404-m405_w1a53a_firmware	eq	< 2-2322c
laserjet_pro_m404-m405_w1a56a_firmware	eq	< 2-2322c
laserjet_pro_m404-m405_w1a57a_firmware	eq	< 2-2322c