Cross site request forgery (csrf)

2018-10-0320:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.8%

JSON

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.

CPENameOperatorVersion
a2w75a_firmwareeq< 2405129-54
a2w76a_firmwareeq< 2405129-54
a2w77a_firmwareeq< 2405129-57
a2w78a_firmwareeq< 2405129-57
a2w79a_firmwareeq< 2405129-57
b3g84a_firmwareeq< 2405129-40
b3g85a_firmwareeq< 2405129-40
b3g86a_firmwareeq< 2405129-40
b5l04a_firmwareeq< 2405129-50
b5l05a_firmwareeq< 2405129-50

Name	Operator	Version
a2w75a_firmware	eq	< 2405129-54
a2w76a_firmware	eq	< 2405129-54
a2w77a_firmware	eq	< 2405129-57
a2w78a_firmware	eq	< 2405129-57
a2w79a_firmware	eq	< 2405129-57
b3g84a_firmware	eq	< 2405129-40
b3g85a_firmware	eq	< 2405129-40
b3g86a_firmware	eq	< 2405129-40
b5l04a_firmware	eq	< 2405129-50
b5l05a_firmware	eq	< 2405129-50

Rows per page:

1-10 of 1971

References

support.hp.com/us-en/document/c05949322