Lucene search

K
hpHP Product Security Response TeamHPSBPI03823
HistoryDec 05, 2022 - 12:00 a.m.

Certain HP Printers may be vulnerable to 3DES Sweet32 Vulnerability

2022-12-0500:00:00
HP Product Security Response Team
support.hp.com
4

7.1 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.9%

A recent firmware release, specifically FutureSmart 3.9.10, altered the cipher suite prioritization list placing the 3DES cipher into the HIGH prioritization cipher list. By default, this version (3.9.10) enables 3DES which is a “weak” cipher and may potentially allow the “Sweet32” vulnerability to be exploited.

Update firmware. Ensure cipher suite configuration is set to HIGH.