CVE-2019-18917

🗓️ 16 Mar 2020 19:53:54Reported by hpType

Potential security vulnerability in certain HP Printers and All-in-Ones allowing account lockout bypass

Reporter	Title	Published	Views	Family All 7
CNVD	Multiple HP Products Licensing Issues Vulnerabilities	18 Mar 202000:00	–	cnvd
Cvelist	CVE-2019-18917	16 Mar 202019:53	–	cvelist
EUVD	EUVD-2019-8595	7 Oct 202500:30	–	euvd
Hewlett-Packard	HPSBPI03660 rev. 1 - HP Inkjet Printers Account Lockout Issue	16 Mar 202000:00	–	hp
NVD	CVE-2019-18917	16 Mar 202020:15	–	nvd
Prion	Design/Logic Flaw	16 Mar 202020:15	–	prion
RedhatCVE	CVE-2019-18917	9 Jan 202610:18	–	redhatcve

NVD

Node

hp envy_5000_m2u85a_firmwareRange<003.2008a

AND

hp envy_5000_m2u85aMatch-

Node

hp envy_5000_m2u85b_firmwareRange<003.2008a

AND

hp envy_5000_m2u85bMatch-

Node

hp envy_5000_m2u91a_firmwareRange<003.2008a

AND

hp envy_5000_m2u91aMatch-

Node

hp envy_5000_m2u94b_firmwareRange<003.2008a

AND

hp envy_5000_m2u94bMatch-

Node

hp envy_5000_z4a54a_firmwareRange<003.2008a

AND

hp envy_5000_z4a54aMatch-

Node

hp envy_5000_z4a74a_firmwareRange<003.2008a

AND

hp envy_5000_z4a74aMatch-

Node

hp deskjet_ink_advantage_5000_m2u86a_firmwareRange<003.2008a

AND

hp deskjet_ink_advantage_5000_m2u86aMatch-

Node

hp deskjet_ink_advantage_5000_m2u89b_firmwareRange<003.2008a

AND

hp deskjet_ink_advantage_5000_m2u89bMatch-

[
  {
    "product": "HP ENVY 5000 All-in-One Printer series (M2U85A - M2U85B, M2U91A - M2U94B, Z4A54A - Z4A74A); HP DeskJet Ink Advantage 5000 All-in-One Printer series (M2U86A - M2U89B)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Before 003.2008A"
      }
    ]
  }
]

Source	Link
support	www.support.hp.com/us-en/document/c06594863

21 Nov 2024 04:33Current

6.5Medium risk

Vulners AI Score6.5

CVSS 26.4

CVSS 3.16.5

EPSS0.01024

CWE-307

cve-2019-18917 hp printers all-in-ones security vulnerability bypass account lockout