Lucene search

K
cve[email protected]CVE-2023-4694
HistoryDec 14, 2023 - 7:15 p.m.

CVE-2023-4694

2023-12-1419:15:16
web.nvd.nist.gov
13
hp
officejet pro
printers
vulnerability
dos
soap message
tcp port 3911

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

15.8%

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when sending a SOAP message to the service on TCP port 3911 that contains a body but no header.

Affected configurations

NVD
Node
hpofficejet_pro_8730_d9l19aMatch-
AND
hpofficejet_pro_8730_d9l19a_firmwareRange<001.2337a
Node
hpofficejet_pro_8730_m9l74aMatch-
AND
hpofficejet_pro_8730_m9l74a_firmwareRange<001.2337a
Node
hpofficejet_pro_8730_m9l75aMatch-
AND
hpofficejet_pro_8730_m9l75a_firmwareRange<001.2337a
Node
hpofficejet_pro_8730_m9l76aMatch-
AND
hpofficejet_pro_8730_m9l76a_firmwareRange<001.2337a
Node
hpofficejet_pro_8730_j7a28aMatch-
AND
hpofficejet_pro_8730_j7a28a_firmwareRange<001.2337a
Node
hpofficejet_pro_8730_j7a31aMatch-
AND
hpofficejet_pro_8730_j7a31a_firmwareRange<001.2337a
Node
hpofficejet_pro_8730_k7s34a_firmwareRange<001.2337a
AND
hpofficejet_pro_8730_k7s34aMatch-
Node
hpofficejet_pro_8730_k7s35a_firmwareRange<001.2337a
AND
hpofficejet_pro_8730_k7s35aMatch-
Node
hpofficejet_pro_8730_m9l80a_firmwareRange<001.2337a
AND
hpofficejet_pro_8730_m9l80aMatch-
Node
hpofficejet_pro_8730_j7a29a_firmwareRange<001.2337a
AND
hpofficejet_pro_8730_j7a29aMatch-
Node
hpofficejet_pro_8730_k7s36a_firmwareRange<001.2337a
AND
hpofficejet_pro_8730_k7s36aMatch-
Node
hpofficejet_pro_8730_t0g54a_firmwareRange<001.2337a
AND
hpofficejet_pro_8730_t0g54aMatch-

CNA Affected

[
  {
    "vendor": "HP Inc.",
    "product": "HP OfficeJet Pro Printers",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "See HP Security Bulletin reference for affected versions.",
        "status": "affected"
      }
    ]
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

15.8%

Related for CVE-2023-4694