Lucene search

[email protected]CVE-2023-27973

HistoryApr 28, 2023 - 5:15 p.m.

CVE-2023-27973

2023-04-2817:15:43

CWE-787

[email protected]

web.nvd.nist.gov

laserjet pro

print products

vulnerability

heap overflow

remote code execution

cve-2023-27973

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

JSON

Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.

Affected configurations

NVD

Node

hplaserjet_pro_m304-m305_w1a46a_firmwareRange<002_2310a

AND

hplaserjet_pro_m304-m305_w1a46aMatch-

Node

hplaserjet_pro_m304-m305_w1a47a_firmwareRange<002_2310a

AND

hplaserjet_pro_m304-m305_w1a47aMatch-

Node

hplaserjet_pro_m304-m305_w1a48a_firmwareRange<002_2310a

AND

hplaserjet_pro_m304-m305_w1a48aMatch-

Node

hplaserjet_pro_m304-m305_w1a66a_firmwareRange<002_2310a

AND

hplaserjet_pro_m304-m305_w1a66aMatch-

Node

hplaserjet_pro_m404-m405_93m22a_firmwareRange<002_2310a

AND

hplaserjet_pro_m404-m405_93m22aMatch-

Node

hplaserjet_pro_m404-m405_w1a51a_firmwareRange<002_2310a

AND

hplaserjet_pro_m404-m405_w1a51aMatch-

Node

hplaserjet_pro_m404-m405_w1a52a_firmwareRange<002_2310a

AND

hplaserjet_pro_m404-m405_w1a52aMatch-

Node

hplaserjet_pro_m404-m405_w1a53a_firmwareRange<002_2310a

AND

hplaserjet_pro_m404-m405_w1a53aMatch-

Node

hplaserjet_pro_m404-m405_w1a56a_firmwareRange<002_2310a

AND

hplaserjet_pro_m404-m405_w1a56aMatch-

Node

hplaserjet_pro_m404-m405_w1a57a_firmwareRange<002_2310a

AND

hplaserjet_pro_m404-m405_w1a57aMatch-

Node

hplaserjet_pro_m404-m405_w1a58a_firmwareRange<002_2310a

AND

hplaserjet_pro_m404-m405_w1a58aMatch-

Node

hplaserjet_pro_m404-m405_w1a59a_firmwareRange<002_2310a

AND

hplaserjet_pro_m404-m405_w1a59aMatch-

Node

hplaserjet_pro_m404-m405_w1a60a_firmwareRange<002_2310a

AND

hplaserjet_pro_m404-m405_w1a60aMatch-

Node

hplaserjet_pro_m404-m405_w1a63a_firmwareRange<002_2310a

AND

hplaserjet_pro_m404-m405_w1a63aMatch-

Node

hplaserjet_pro_m453-m454_w1y40a_firmwareRange<002_2310a

AND

hplaserjet_pro_m453-m454_w1y40aMatch-

Node

hplaserjet_pro_m453-m454_w1y41a_firmwareRange<002_2310a

AND

hplaserjet_pro_m453-m454_w1y41aMatch-

Node

hplaserjet_pro_m453-m454_w1y43a_firmwareRange<002_2310a

AND

hplaserjet_pro_m453-m454_w1y43aMatch-

Node

hplaserjet_pro_m453-m454_w1y44a_firmwareRange<002_2310a

AND

hplaserjet_pro_m453-m454_w1y44aMatch-

Node

hplaserjet_pro_m453-m454_w1y45a_firmwareRange<002_2310a

AND

hplaserjet_pro_m453-m454_w1y45aMatch-

Node

hplaserjet_pro_m453-m454_w1y46a_firmwareRange<002_2310a

AND

hplaserjet_pro_m453-m454_w1y46aMatch-

Node

hplaserjet_pro_m453-m454_w1y47a_firmwareRange<002_2310a

AND

hplaserjet_pro_m453-m454_w1y47aMatch-

Node

hplaserjet_pro_mfp_m428-m429_f_w1a29a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m428-m429_f_w1a29aMatch-

Node

hplaserjet_pro_mfp_m428-m429_f_w1a30a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m428-m429_f_w1a30aMatch-

Node

hplaserjet_pro_mfp_m428-m429_f_w1a32a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m428-m429_f_w1a32aMatch-

Node

hplaserjet_pro_mfp_m428-m429_f_w1a34a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m428-m429_f_w1a34aMatch-

Node

hplaserjet_pro_mfp_m428-m429_f_w1a35a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m428-m429_f_w1a35aMatch-

Node

hplaserjet_pro_mfp_m428-m429_f_w1a38a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m428-m429_f_w1a38aMatch-

Node

hplaserjet_pro_mfp_m428-m429_w1a28a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m428-m429_w1a28aMatch-

Node

hplaserjet_pro_mfp_m428-m429_w1a31a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m428-m429_w1a31aMatch-

Node

hplaserjet_pro_mfp_m428-m429_w1a33a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m428-m429_w1a33aMatch-

Node

hplaserjet_pro_mfp_m478-m479_w1a75a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m478-m479_w1a75aMatch-

Node

hplaserjet_pro_mfp_m478-m479_w1a76a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m478-m479_w1a76aMatch-

Node

hplaserjet_pro_mfp_m478-m479_w1a77a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m478-m479_w1a77aMatch-

Node

hplaserjet_pro_mfp_m478-m479_w1a78a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m478-m479_w1a78aMatch-

Node

hplaserjet_pro_mfp_m478-m479_w1a79a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m478-m479_w1a79aMatch-

Node

hplaserjet_pro_mfp_m478-m479_w1a80a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m478-m479_w1a80aMatch-

Node

hplaserjet_pro_mfp_m478-m479_w1a81a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m478-m479_w1a81aMatch-

Node

hplaserjet_pro_mfp_m478-m479_w1a82a_firmwareRange<002_2310a

AND

hplaserjet_pro_mfp_m478-m479_w1a82aMatch-

CPENameOperatorVersion
hp:laserjet_pro_m304-m305_w1a46a_firmwarehp laserjet pro m304-m305 w1a46a firmwarelt002_2310a

CPE	Name	Operator	Version
hp:laserjet_pro_m304-m305_w1a46a_firmware	hp laserjet pro m304-m305 w1a46a firmware	lt	002_2310a

CNA Affected

[
  {
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ],
    "product": "HP LaserJet Pro",
    "vendor": "HP Inc."
  }
]

References

support.hp.com/us-en/document/ish_7920137-7920161-16/hpsbpi03841

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

JSON

Related for CVE-2023-27973

hp1 zdi1 prion1 nvd1 cvelist1 openvas1