CVE-2019-6326

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have embedded web server attributes which may be potentially vulnerable to Buffer Overflow...

CVE-2019-6325

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery...

CVE-2019-6327

CVE-2019-6327 affects HP Color LaserJet Pro M280-M281 Multifunction Printer series (before 20190419) and HP LaserJet Pro MFP M28-M31 Printer series (before 20190426). The issue is a buffer overflow in the IPP service/parser, per multiple sources (NVD/NVDC equivalents and HP advisory). Impact deta...

CVE-2019-6326

CVE-2019-6326 affects HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v20190419) and HP LaserJet Pro MFP M28-M31 Printer series (before v20190426). The vulnerability is a Buffer Overflow in the device’s embedded web server, triggered by processing memory operations without pr...

CVE-2019-6325

CVE-2019-6325 affects HP Color LaserJet Pro M280-M281 Multifunction Printer series (before 20190419) and HP LaserJet Pro MFP M28-M31 Printer series (before 20190426). The vulnerability is a Cross-Site Request Forgery in the printer’s embedded web server. HP’s advisory (HPSBPI03619 rev. 2) notes t...

CVE-2019-6325

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery...

CVE-2019-6324

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server potentially vulnerable to stored XSS in wireless configuration page...

CVE-2019-6323

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server potentially vulnerable to reflected XSS in wireless configuration page...

The vulnerability of HP Color LaserJet Pro printer’s microprogramming software, related to the falsification of inter-site requests, allows a perpetrator to trigger a service failure.

The vulnerability of HP Color LaserJet Pro printer microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Command Execution Vulnerability in HP Color LaserJet Pro M252 Series

The HP Color LaserJet Pro M252 is a color laser printer manufactured by HP Trading Shanghai Co. A command execution vulnerability exists in the HP Color LaserJet Pro M252 series, which can be exploited by an attacker to execute remote commands...

HP LaserJet Pro P1606dn - Webadmin Password Reset

No description provided by source. !/usr/bin/python Exploit Title: HP LaserJet Pro P1606dn Webadmin password reset Date: 20.05.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://www8.hp.com/de/de/products/printers/product-detail.html?oid=4110411 Firmware...

HP LaserJet Pro Printers OpenSSL Heartbeat Information Disclosure (HPSBPI03014) (Heartbleed)

Binary data hplaserjetprohpsbpi03014.nbin...

HPSBPI03014 rev.2 - HP LaserJet Pro MFP Printers, HP Color LaserJet Pro MFP Printers, Remote Disclosure of Information

Potential Security Impact Remote disclosure of information VULNERABILITY SUMMARY A potential vulnerability exists in HP LaserJet Pro MFP Printers, HP Color LaserJet Pro MFP Printers. This is the OpenSSL vulnerability known as "Heartbleed" CVE-2014-0160 which could be exploited remotely resulting ...

Multiple HP LaserJet Pro Printers Information Disclosure Vulnerability (Aug 2013)

Multiple HP LaserJet Pro Printers are prone to an information disclosure vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

HP LaserJet Pro /IoMgmt/Adapters/wifi0/WPS/Pin WPS PIN Disclosure

The remote HP LaserJet Pro printer is affected by an information disclosure vulnerability. The file '/IoMgmt/Adapters/wifi0/WPS/Pin' contains the 'Wi-Fi Protected Security' WPS PIN. This information can be used by an attacker in further attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

HP LaserJet Pro /dev/save_restore.xml Administrative Password Disclosure

The remote HP LaserJet Pro printer is affected by an information disclosure vulnerability. The file '/dev/saverestore.xml' contains a hexadecimal representation of the administrative password. This information can be used by an attacker in further attacks. %NASLMINLEVEL 70300 C Tenable Network...

Code injection

Unspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn, M1212nf MFP, M1213nf MFP, M1214nfh MFP, M1216nfh MFP, M1217nfw MFP, M1218nfs MFP, and CP1025nw with firmware before 2013-07-26 20130703 allows remote attackers to modify data via unknown vectors...

HP LaserJet Pro printers remote admin password extraction

Some of the networked HP LaserJet printers have hidden URLs hardcoded in the firmware. The URLs are not authenticated and can be used to extract admin password in plaintext v among other information like WiFi settings including WPS PIN. Models affected: HP LaserJet Pro P1102w, HP LaserJet Pro...

HPSBPI02887 rev.2 - Certain HP LaserJet Pro Printers, Remote Information Disclosure

NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date: 2013-07-31 Last Updated: 2013-07-31 Potential Security Impact: Remote information disclosure Source: Hewlett-Packard Company, HP Software Security Response Team VULNERABILITY SUMMARY A...

CVE-2013-4807

CVE-2013-4807 affects several HP LaserJet Pro models (P1102w, P1606dn, CP1025nw, M1212nf/M1213nf/M1214nfh/M1216nfh/M1217nfw/M1218nfs) with firmware prior to 2013-07-26. The vulnerability enables remote attackers to modify data and disclose sensitive information through unspecified vectors, via hi...