HP PageWide and OfficeJet Printers Local Code Execution (CVE-2020-28416)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(503301);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/05/26");

  script_cve_id("CVE-2020-28416");

  script_name(english:"HP PageWide and OfficeJet Printers Local Code Execution (CVE-2020-28416)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"HP has identified a security vulnerability with the I.R.I.S. OCR
(Optical Character Recognition) software available with HP PageWide
and OfficeJet printer software installations that could potentially
allow unauthorized local code execution.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://support.hp.com/us-en/document/ish_10174556-10421270-16/hpsbpi03720
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b78caa86");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-28416");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"vuln_publication_date", value:"2021/11/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2021/11/03");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/07/28");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6830_e3e02a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6830_m0f56a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6830c_l3l04a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6835_j2d37a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_j7k33a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_j7k35a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_j7k37a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_j7k38a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_j7k39a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_t0f28a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_t0f30a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_t0f31a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_t0f32a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_t0f36a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_t0f38a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_t0g25a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6960_t0g26a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_j7k34a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_j7k36a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_j7k40a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_j7k41a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_j7k42a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_t0f29a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_t0f33a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_t0f34a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_t0f35a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_t0f37a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_t0f39a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_6970_t0f40a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_7740_g5j38a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_7745_t1p99a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8710_d9l18a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8710_j6x79a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8710_m9l66a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8710_m9l67a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8712_t0g46a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8715_j6x76a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8715_j6x78a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8715_j6x80a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8715_k7s37a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8715_m9l70a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8716_j6x77a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8716_j6x81a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8717_k7s38a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8717_m9l65a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8718_t0g47a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8718_t0g48a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8719_t0g49a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8720_d9l19a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8720_k7s35a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8720_k7s36a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8720_m9l74a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8720_m9l75a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8720_m9l76a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8725_j7a28a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8725_j7a31a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8725_k7s34a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8725_m9l80a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8727_j7a29a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8728_t0g54a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8732m_t0g56a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8732m_t0g57a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8732m_t0g58a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8732m_t0g59a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8730_d9l20a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8740_d9l21a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8740_k7s42a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8740_t0g65a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8740_k7s39a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8740_j6x83a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8740_k7s43a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8740_k7s40a_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:officejet_pro_8740_k7s41a_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/HP");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/HP');

var asset = tenable_ot::assets::get(vendor:'HP');

var vuln_cpes = {
    "cpe:/o:hp:officejet_pro_7740_g5j38a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_7745_t1p99a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_t0g25a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_t0g26a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_j7k33a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_t0f30a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_t0f32a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_t0f38a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_t0f31a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_j7k37a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_j7k38a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_j7k35a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_j7k39a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_t0f28a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6960_t0f36a_firmware" :
        {"versionEndExcluding" : "40.11.1150", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_j7k34a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_t0f33a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_t0f39a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_t0f34a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_t0f35a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_j7k40a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_j7k36a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_j7k42a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_j7k41a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_t0f29a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_t0f37a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6970_t0f40a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6830c_l3l04a_firmware" :
        {"versionEndExcluding" : "33.1.74", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6830_e3e02a_firmware" :
        {"versionEndExcluding" : "33.1.74", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6830_m0f56a_firmware" :
        {"versionEndExcluding" : "33.1.74", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_6835_j2d37a_firmware" :
        {"versionEndExcluding" : "33.1.74", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8732m_t0g56a_firmware" :
        {"versionEndExcluding" : "38.8.1942", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8732m_t0g57a_firmware" :
        {"versionEndExcluding" : "38.8.1942", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8732m_t0g58a_firmware" :
        {"versionEndExcluding" : "38.8.1942", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8732m_t0g59a_firmware" :
        {"versionEndExcluding" : "38.8.1942", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8730_d9l20a_firmware" :
        {"versionEndExcluding" : "001.2207c", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8740_d9l21a_firmware" :
        {"versionEndExcluding" : "001.2207c", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8740_k7s42a_firmware" :
        {"versionEndExcluding" : "001.2207c", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8740_t0g65a_firmware" :
        {"versionEndExcluding" : "001.2207c", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8740_k7s39a_firmware" :
        {"versionEndExcluding" : "001.2207c", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8740_j6x83a_firmware" :
        {"versionEndExcluding" : "001.2207c", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8740_k7s43a_firmware" :
        {"versionEndExcluding" : "001.2207c", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8740_k7s40a_firmware" :
        {"versionEndExcluding" : "001.2207c", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8740_k7s41a_firmware" :
        {"versionEndExcluding" : "001.2207c", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8710_d9l18a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8720_d9l19a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8715_j6x76a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8716_j6x77a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8715_j6x78a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8710_j6x79a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8715_j6x80a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8716_j6x81a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8725_j7a28a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8727_j7a29a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8725_j7a31a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8725_k7s34a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8720_k7s35a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8720_k7s36a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8715_k7s37a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8717_k7s38a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8717_m9l65a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8710_m9l66a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8710_m9l67a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8715_m9l70a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8720_m9l74a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8720_m9l75a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8720_m9l76a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8725_m9l80a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8712_t0g46a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8718_t0g47a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8718_t0g48a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8719_t0g49a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"},
    "cpe:/o:hp:officejet_pro_8728_t0g54a_firmware" :
        {"versionEndExcluding" : "40.12.1161", "family" : "OfficejetPro"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);