Lucene search

[email protected]CVE-2019-18912

HistoryNov 09, 2021 - 3:15 p.m.

CVE-2019-18912

2021-11-0915:15:08

[email protected]

web.nvd.nist.gov

cve-2019-18912

hp printers

mfps

troy solutions

futuresmart firmware

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart Firmware bundle version 4.9 or 4.9.0.1 the potential vulnerability may cause instability in the solution.

Affected configurations

NVD

Node

hplaserjet_enterprise_m507_1pv86aMatch-

hplaserjet_enterprise_m507_1pv87aMatch-

hplaserjet_enterprise_m507_1pv89aMatch-

AND

hpfuturesmart_4Range<2409065_000092

Node

hplaserjet_enterprise_m607_k0q14aMatch-

hplaserjet_enterprise_m607_k0q15aMatch-

hplaserjet_enterprise_m608_k0q17aMatch-

hplaserjet_enterprise_m608_k0q18aMatch-

hplaserjet_enterprise_m608_k0q19aMatch-

hplaserjet_enterprise_m609_k0q20aMatch-

hplaserjet_enterprise_m609_k0q21aMatch-

hplaserjet_enterprise_m609_k0q22aMatch-

AND

hpfuturesmart_4Range<2409065_000063

Node

hplaserjet_enterprise_m806_cz244aMatch-

hplaserjet_enterprise_m806_cz245aMatch-

AND

hpfuturesmart_4Range<2409065_000082

Node

hplaserjet_enterprise_flow_mfp_m527_f2a78vMatch-

hplaserjet_enterprise_flow_mfp_m527_f2a79aMatch-

hplaserjet_enterprise_flow_mfp_m527_f2a80aMatch-

hplaserjet_enterprise_mfp_m527_f2a76aMatch-

hplaserjet_enterprise_mfp_m527_f2a77aMatch-

hplaserjet_enterprise_mfp_m527_f2a81aMatch-

AND

hpfuturesmart_4Range<2409065_000073

Node

hplaserjet_enterprise_mfp_m528_1pv64aMatch-

hplaserjet_enterprise_mfp_m528_1pv65aMatch-

hplaserjet_enterprise_mfp_m528_1pv67aMatch-

AND

hpfuturesmart_4Range<2409065_000054

CPENameOperatorVersion
hp:futuresmart_4hp futuresmart 4lt2409065_000092

CPE	Name	Operator	Version
hp:futuresmart_4	hp futuresmart 4	lt	2409065_000092

CNA Affected

[
  {
    "product": "HP LaserJet Enterprise Printers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before FS4: 2409065_000054"
      },
      {
        "status": "affected",
        "version": "before FS4: 2409065_000073"
      },
      {
        "status": "affected",
        "version": "before FS4: 2409065_000082"
      },
      {
        "status": "affected",
        "version": "before FS4: 2409065_000063"
      },
      {
        "status": "affected",
        "version": "before FS4: 2409065_000092"
      }
    ]
  }
]

References

support.hp.com/us-en/document/c06513924

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2019-18912

nvd1 prion1 hp1 cvelist1