HP Multiple Products Buffer Overflow (CVE-2019-10627)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(503307);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/07/28");

  script_cve_id("CVE-2019-10627");

  script_name(english:"HP Multiple Products Buffer Overflow (CVE-2019-10627)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Integer overflow to buffer overflow vulnerability in PostScript image
handling code used by the PostScript- and PDF-compatible interpreters
due to incorrect buffer size calculation. in PostScript and PDF
printers that use IPS versions prior to 2019.2 in PostScript and PDF
printers that use IPS versions prior to 2019.2

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"https://support.hp.com/us-en/document/c06458150");
  # https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?263098ad");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-10627");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(119, 131, 190);

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/21");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/11/21");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/07/28");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:d3q15a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:d3q16a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:d3q17a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:d3q19a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:d3q20a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:d3q21a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:d9l63a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:d9l64a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:j3p65a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:j3p68a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:j6u55a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:j6u57a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:j9v80a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:j9v82a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:k9z74a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:k9z76a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:t0g70a_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/HP");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/HP');

var asset = tenable_ot::assets::get(vendor:'HP');

var vuln_cpes = {
    "cpe:/o:hp:d9l63a_firmware" :
        {"versionEndExcluding" : "001.1937c", "family" : "OfficejetPro"},
    "cpe:/o:hp:d9l64a_firmware" :
        {"versionEndExcluding" : "001.1937c", "family" : "OfficejetPro"},
    "cpe:/o:hp:t0g70a_firmware" :
        {"versionEndExcluding" : "001.1937c", "family" : "OfficejetPro"},
    "cpe:/o:hp:j3p65a_firmware" :
        {"versionEndExcluding" : "001.1937c", "family" : "OfficejetPro"},
    "cpe:/o:hp:j3p68a_firmware" :
        {"versionEndExcluding" : "001.1937c", "family" : "OfficejetPro"},
    "cpe:/o:hp:j6u57a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:j9v80a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:j6u55a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:j9v82a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:d3q15a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:d3q16a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:d3q19a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:d3q20a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:d3q17a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:k9z74a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:d3q21a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"},
    "cpe:/o:hp:k9z76a_firmware" :
        {"versionEndExcluding" : "001.1937d", "family" : "OfficejetPro"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);