Lucene search

[email protected]CVE-2019-18916

HistoryNov 09, 2021 - 2:15 p.m.

CVE-2019-18916

2021-11-0914:15:11

CWE-269

[email protected]

web.nvd.nist.gov

cve-2019-18916

hp laserjet

solution software

unauthorized elevation of privilege

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printers) which may lead to unauthorized elevation of privilege on the client.

Affected configurations

NVD

Node

hpcolor_laserjet_pro_mfp_m277_b3q11a_firmwareRange14.0.15344.534≥

AND

hpcolor_laserjet_pro_mfp_m277_b3q11aMatch-

Node

hpcolor_laserjet_pro_mfp_m277_b3q11v_firmwareRange14.0.15344.534≥

AND

hpcolor_laserjet_pro_mfp_m277_b3q11vMatch-

Node

hpcolor_laserjet_pro_mfp_m277_b3q10a_firmwareRange14.0.15344.534≥

AND

hpcolor_laserjet_pro_mfp_m277_b3q10aMatch-

Node

hpcolor_laserjet_pro_mfp_m277_b3q10v_firmwareRange14.0.15344.534≥

AND

hpcolor_laserjet_pro_mfp_m277_b3q10vMatch-

Node

hpcolor_laserjet_pro_mfp_m277_b3q17a_firmwareRange14.0.15344.534≥

AND

hpcolor_laserjet_pro_mfp_m277_b3q17aMatch-

CPENameOperatorVersion
hp:color_laserjet_pro_mfp_m277_b3q11a_firmwarehp color laserjet pro mfp m277 b3q11a firmwareeq*

CPE	Name	Operator	Version
hp:color_laserjet_pro_mfp_m277_b3q11a_firmware	hp color laserjet pro mfp m277 b3q11a firmware	eq	*

CNA Affected

[
  {
    "product": "HP Color LaserJet Pro MFP M277 printers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before 14.0.15344.534"
      }
    ]
  }
]

References

support.hp.com/us-en/document/c06586963

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2019-18916

cvelist1 nvd1 hp1 prion1