Cross site request forgery (csrf)

2019-06-1716:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.7%

JSON

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery.

CPENameOperatorVersion
t6b80a_firmwareeq< 2019419
t6b81a_firmwareeq< 2019419
t6b82a_firmwareeq< 2019419
t6b83a_firmwareeq< 2019419
w2g54a_firmwareeq< 2019426
w2g55a_firmwareeq< 2019426
y5s50a_firmwareeq< 2019426
y5s53a_firmwareeq< 2019426
y5s54a_firmwareeq< 2019426
y5s55a_firmwareeq< 2019426

Name	Operator	Version
t6b80a_firmware	eq	< 2019419
t6b81a_firmware	eq	< 2019419
t6b82a_firmware	eq	< 2019419
t6b83a_firmware	eq	< 2019419
w2g54a_firmware	eq	< 2019426
w2g55a_firmware	eq	< 2019426
y5s50a_firmware	eq	< 2019426
y5s53a_firmware	eq	< 2019426
y5s54a_firmware	eq	< 2019426
y5s55a_firmware	eq	< 2019426

References

support.hp.com/us-en/document/c06356322