Lucene search
+L

218 matches found

CNNVD
CNNVD
added 2024/02/20 12:0 a.m.3 views

Hp LaserJet Pro Printer Security Vulnerability

The HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP in the United States. A security vulnerability exists in the Hp LaserJet Pro Printer that stems from a buffer overflow vulnerability that can be exploited by an attacker to execute remote code...

9.8CVSS7.5AI score0.01342EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/08 12:0 a.m.7 views

The vulnerability of HP LaserJet Pro printer’s microprogramming software, related to writing beyond the buffer limit, allows a hacker to execute arbitrary code.

The vulnerability of HP LaserJet Pro printer microprogramming software is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.01486EPSS
Exploits0References3Affected Software20
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.11 views

The vulnerability of HP LaserJet Pro printer’s microprogramming software lies in the copying of buffers without checking the size of the input data, allowing attackers to exploit this to gain higher privileges.

The vulnerability of HP LaserJet Pro printer microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

8.8CVSS7.7AI score0.00892EPSS
Exploits0References3Affected Software26
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.7 views

The vulnerability of HP LaserJet Pro printer’s microprogramming software lies in the copying of buffers without checking the size of the input data, allowing a hacker to execute arbitrary code.

The vulnerability of HP LaserJet Pro printer microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.8CVSS8.1AI score0.01486EPSS
Exploits0References3Affected Software26
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.23 views

HP Color LaserJet Pro M479fdw ledm_advanced Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ExportFile handler. The issue results from the lack...

8.8CVSS7.3AI score0.01486EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.26 views

HP Color LaserJet Pro M479fdw cacheddata_http_handler Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the cacheddatahttphandler method. The issue results fro...

8.8CVSS7.3AI score0.01486EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.30 views

(Pwn2Own) HP Color LaserJet Pro M479fdw NotifyTo Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the NotifyTo element. The issue results from th...

8.8CVSS7.4AI score0.01849EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.18 views

(Pwn2Own) HP Color LaserJet Pro M479fdw CFF Font Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of CFF fonts. The issue results from the...

8.8CVSS7.3AI score0.00372EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.163 views

(Pwn2Own) HP Color LaserJet Pro M479fdw slangapp PATH_INFO Stack-based Buffer Overflow Remote Code Execution

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the slangapp binary. When parsing the value of the pass...

8.8CVSS7.4AI score0.00397EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.24 views

(Pwn2Own) HP Color LaserJet Pro M479fdw msws Probe Message Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Probe messages. The issue results from...

8.8CVSS7.3AI score0.00892EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.32 views

(Pwn2Own) HP LaserJet Pro M479fdw bksettings Hardcoded Cryptographic Key Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of HP LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Backup and Restore functionality. The issue results from a...

8.8CVSS7.5AI score0.0043EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.38 views

(Pwn2Own) HP Color LaserJet Pro M479fdw msws Server-Side Request Forgery Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printer. Authentication is not required to exploit this vulnerability. The specific flaw exists within the msws service. The issue results from the lack of...

8.8CVSS7.3AI score0.01849EPSS
Exploits0References1
OSV
OSV
added 2023/07/21 5:15 p.m.2 views

CVE-2023-26301

Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints...

9.8CVSS5.8AI score0.00648EPSS
Exploits0References1
NVD
NVD
added 2023/07/21 5:15 p.m.17 views

CVE-2023-26301

Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints...

9.8CVSS9.5AI score0.00648EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/07/21 12:0 a.m.5 views

Hp LaserJet Pro Printer 安全漏洞

The HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP in the United States. A security vulnerability exists in Hp LaserJet Pro Printer that originates from the presence of an escalation of privilege or information disclosure vulnerability...

9.8CVSS8.3AI score0.00648EPSS
Exploits0References3
Hewlett-Packard
Hewlett-Packard
added 2023/07/20 12:0 a.m.22 views

Certain HP LaserJet Pro print products - Potential elevation of privilege and/or information disclosure

Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints. Update the printer firmware...

9.8CVSS7.2AI score0.00648EPSS
Exploits0
NVD
NVD
added 2023/06/30 4:15 p.m.33 views

CVE-2023-35175

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model...

9.8CVSS9.9AI score0.01849EPSS
Exploits0References1
OSV
OSV
added 2023/06/30 4:15 p.m.3 views

CVE-2023-35175

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model...

9.8CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2023/06/30 4:15 p.m.32 views

CVE-2023-35178

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs...

8.8CVSS8.8AI score0.00397EPSS
Exploits0References1
OSV
OSV
added 2023/06/30 4:15 p.m.5 views

CVE-2023-35178

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs...

8.8CVSS5.8AI score0.00397EPSS
Exploits0References1
Rows per page
Query Builder