HPSBPI03720 rev. 1 - Software Vulnerability with Certain HP OfficeJet and PageWide Solutions

Potential Security Impact

Local Code Execution

Source: HP, HP Product Security Response Team (PSRT)

VULNERABILITY SUMMARY

HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with HP PageWide and OfficeJet printer software installations that could potentially allow unauthorized local code execution.

RESOLUTION

1. Remove the affected software version.

1. In Windows Settings, click Apps & Features. 

2. Select I.R.I.S OCR. 

3. Click on the Uninstall button to complete the removal. 

2. HP has provided software updates for potentially impacted printers for the products listed in the table below. To obtain the updated software solution, go to HP Software and Driver Downloads and search for your printer model.