Lucene search

K
hpHP Product Security Response TeamHP:C04451722
HistorySep 18, 2014 - 12:00 a.m.

HPSBPI03107 rev.3 - Certain HP LaserJet Printers, MFPs and Certain HP OfficeJet Enterprise Printers using OpenSSL, Remote Unauthorized Access

2014-09-1800:00:00
HP Product Security Response Team
support.hp.com
356

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

Potential Security Impact

Remote Unauthorized access

VULNERABILITY SUMMARY

A potential security vulnerability has been identified with certain HP LaserJet Printers, MFPs and certain HP OfficeJet Enterprise Printers using OpenSSL. The vulnerability could be exploited remotely to allow remote unauthorized access.

Note: This OpenSSL vulnerability was detected in specific OpenSSL versions. OpenSSL is a 3rd party product that is embedded with some HP printer products. This bulletin notifies HP Printer customers about impacted products.

RESOLUTION

HP has provided firmware updates for impacted printers as set forth in the table below. To obtain the updated firmware, go to the HP Software and Drivers page for your product and find the firmware update from the list of available software.

Firmware Updates Table

Product Name

|

Model Number

|

Firmware Revision

—|—|—

Product Name

|

Model

|

Firmware Update Version

HP Color LaserJet CM4540 MFP

|

CC419A, CC420A, CC421A

|

v 2302963_436067 (or higher)

HP Color LaserJet CP5525

|

CE707A,CE708A,CE709A

|

v 2302963_436070 (or higher)

HP Color LaserJet Enterprise M750

|

D3L08A, D3L09A, D3L10A

|

v 2302963_436077 (or higher)

HP Color LaserJet M651

|

CZ255A, CZ256A, CZ257A, CZ258A

|

v 2302963_436073 (or higher)

HP Color LaserJet M680

|

CZ248A, CZ249A

|

v 2302963_436072 (or higher)

HP Color LaserJet Flow M680

|

CZ250A, CA251A

|

v 2302963_436072 (or higher)

HP LaserJet Enterprise 500 color MFP M575dn

|

CD644A, CD645A

|

v 2302963_436081 (or higher)

HP LaserJet Enterprise 500 MFP M525f

|

CF116A, CF117A

|

v 2302963_436069 (or higher)

HP LaserJet Enterprise 600 M601 Series

|

CE989A, CE990A

|

v 2302963_436082 (or higher)

HP LaserJet Enterprise 600 M602 Series

|

CE991A, CE992A, CE993A

|

v 2302963_436082 (or higher)

HP LaserJet Enterprise 600 M603 Series

|

CE994A, CE995A, CE996A

|

v 2302963_436082 (or higher)

HP LaserJet Enterprise MFP M630 series

|

B3G84A, B3G85A, B3G86A, J7X28A

|

v 2303714_233000041 (or higher)

HP LaserJet Enterprise 700 color M775 series

|

CC522A, CC523A, CC524A, CF304A

|

v 2302963_436079 (or higher)

HP LaserJet Enterprise 700 M712 series

|

CF235A, CF236A, CF238A

|

v 2302963_436080 (or higher)

HP LaserJet Enterprise 800 color M855

|

A2W77A, A2W78A, A2W79A

|

v 2302963_436076 (or higher)

HP LaserJet Enterprise 800 color MFP M880

|

A2W76A, A2W75A, D7P70A, D7P71A

|

v 2302963_436068 (or higher)

HP LaserJet Enterprise Color 500 M551 Series

|

CF081A,CF082A,CF083A

|

v 2302963_436083 (or higher)

HP LaserJet Enterprise color flow MFP M575c

|

CD646A

|

v 2302963_436081 (or higher)

HP LaserJet Enterprise flow M830z MFP

|

CF367A

|

v 2302963_436071 (or higher)

HP LaserJet Enterprise flow MFP M525c

|

CF118A

|

v 2302963_436069 (or higher)

HP LaserJet Enterprise M4555 MFP

|

CE502A,CE503A, CE504A, CE738A

|

v 2302963_436064 (or higher)

HP LaserJet Enterprise M806

|

CZ244A, CZ245A

|

v 2302963_436075 (or higher)

HP LaserJet Enterprise MFP M725

|

CF066A, CF067A, CF068A, CF069A

|

v 2302963_436078 (or higher)

HP Scanjet Enterprise 8500 Document Capture Workstation

|

L2717A, L2719A

|

v 2302963_436065 (or higher)

OfficeJet Enterprise Color MFP X585

|

B5L04A, B5L05A,B5L07A

|

v 2302963_436066 (or higher)

OfficeJet Enterprise Color X555

|

C2S11A, C2S12A

|

v 2302963_436074 (or higher)

HP Color LaserJet CP3525

|

CC468A, CC469A, CC470A, CC471A

|

v 06.183.1 (or higher)

HP LaserJet M4345 Multifunction Printer

|

CB425A, CB426A, CB427A, CB428A

|

v 48.306.1 (or higher)

HP LaserJet M5025 Multifunction Printer

|

Q7840A

|

v 48.306.1 (or higher)

HP Color LaserJet CM6040 Multifunction Printer

|

Q3938A, Q3939A

|

v 52.256.1 (or higher)

HP Color LaserJet Enterprise CP4525

|

CC493A, CC494A, CC495A

|

v 07.164.1 (or higher)

HP Color LaserJet Enterprise CP4025

|

CC489A, CC490A

|

v 07.164.1 (or higher)

HP LaserJet M5035 Multifunction Printer

|

Q7829A, Q7830A, Q7831A

|

v 48.306.1 (or higher)

HP LaserJet M9050 Multifunction Printer

|

CC395A

|

v 51.256.1 (or higher)

HP LaserJet M9040 Multifunction Printer

|

CC394A

|

v 51.256.1 (or higher)

HP Color LaserJet CM4730 Multifunction Printer

|

CB480A, CB481A, CB482A, CB483A

|

v 50.286.1 (or higher)

HP LaserJet M3035 Multifunction Printer

|

CB414A, CB415A, CC476A, CC477A

|

v 48.306.1 (or higher)

HP 9250c Digital Sender

|

CB472A

|

v 48.293.1 (or higher)

HP LaserJet Enterprise P3015

|

CE525A,CE526A,CE527A,CE528A,CE595A

|

v 07.186.1 (or higher)

HP LaserJet M3027 Multifunction Printer

|

CB416A, CC479A

|

v 48.306.1 (or higher)

HP LaserJet CM3530 Multifunction Printer

|

CC519A, CC520A

|

v 53.236.1 (or higher)

HP Color LaserJet CP6015

|

Q3931A, Q3932A, Q3933A, Q3934A, Q3935A

|

v 04.203.1 (or higher)

HP LaserJet P4515

|

CB514A,CB515A, CB516A, CB517A

|

v 04.213.1 (or higher)

HP Color LaserJet CM6030 Multifunction Printer

|

CE664A, CE665A

|

v 52.256.1 (or higher)

HP LaserJet P4015

|

CB509A, CB526A, CB511A, CB510A

|

v 04.213.1 (or higher)

HP LaserJet P4014

|

CB507A, CB506A, CB512A

|

v 04.213.1 (or higher)

HP Color LaserJet 4700 Printer series

|

Q7493A, Q7494A, Q7492A, Q7495A, CB433A, Q7491A, CB432A

|

v 46.230.6 (or higher)

HP LaserJet 4250 Printer series

|

Q5401A, Q5400A, Q5402A, Q5403A, Q5404A

|

v 08.250.2 (or higher)

HP LaserJet 4240 Printer series

|

Q7784A

|

v 08.250.2 (or higher)

HP LaserJet 4350 Printer series

|

Q5410A, Q5407A, Q5408A, Q5406A,Q5409A

|

v 08.250.2 (or higher)

HP LaserJet P3005 Printer series

|

Q7813A, Q7814A, Q7816A, Q7815A, Q7812A

|

v 02.190.3 (or higher)

HP LaserJet 5200 Printer series

|

Q7547A, Q7543A, Q7552A, Q7546A, Q7544A, Q7545A

|

v 08.241.0 (or higher)

HP LaserJet 4345 Multifunction Printer series

|

Q3943A, Q3942A, Q3944A, Q3945A

|

v 09.310.2 (or higher)

HP Color LaserJet CP3505 Printer series

|

CB443A, CE491A, CB442A, CB444A

|

v 03.160.2 (or higher)

HP Color LaserJet 3800 Printer series

|

Q5984A, Q5983A, Q5982A, Q5981A

|

v 46.080.8 (or higher)

HP Color LaserJet CP4005 Printer series

|

CB504A, CB503A

|

v 46.230.6 (or higher)

HP Color LaserJet 3000 Printer series

|

Q7534A, Q7536A, Q7533A, Q7535A

|

v 46.080.2 (or higher)

HP Digital Sender 9200c

|

Q5916A

|

v 09.271.3 (or higher)

HP LaserJet 9040/9050 Printer Series

|

Q3722A, Q3721A, Q3723A, Q7699A, Q7697A, Q7698A

|

v 08.260.3 (or higher)

HP LaserJet 9040/9050 Multifunction Printer Series

|

Q3726A, Q3728A

|

v 08.290.2 (or higher)

HP Color LaserJet 4000 Multifunction Printer series

|

Q7520A, Q7518A, Q7519A, Q7517A, CB483A, CB480A, CB482A, CB481A

|

v 46.380.3 (or higher)

HP Jetdirect 620n EIO Card

|

J7934G

|

v 29.26 (or higher)

HP Jetdirect ew2500 802.11b/g Wireless Print Server

|

J8021A

|

v 41.16 (or higher)

HP Jetdirect 690n EIO Card

|

J8007A

|

v 41.16 (or higher)

HP Jetdirect 635n EIO Card

|

J7961G

|

v 41.16 (or higher)

HP Jetdirect 640n EIO Card

|

J8025A

|

v 45.35 (or higher)

HP Jetdirect 695n EIO Card

|

J8024A

|

v 41.16 (or higher)

HP LaserJet P2055 Printer series

|

CE456A, CE457A, CE459A, CE460A

|

v 20141201 (or higher)

HP LaserJet Pro 200 color Printer M251n/nw

|

CF146A, CF147A

|

v 20140919 (or higher)

HP LaserJet Pro 400 MFP M425dn/dw

|

CF286A, CF288A

|

v 20140919 (or higher)

HP LaserJet Pro 200 color MFP M276n/nw

|

CF144A, CF145A

|

v 20140919 (or higher)

HP LaserJet Pro 400 M401a/d/dn/dnw/dw/n

|

CF270A, CF274A, CF278A,CF399A, CF285A, CZ195A

|

v 20150212 (or higher)

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N