CVE-2018-5921

2018-05-2100:00:00

www.cve.org

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.7%

JSON

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.

CNA Affected

[
  {
    "product": "Certain HP Enterprise Printers, HP PageWide Printers, and MFP Products",
    "vendor": "HP Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "2405129_000052 and other firmware versions"
      }
    ]
  }
]

References

support.hp.com/us-en/document/c05949322