CVE-2019-6326

CVE-2019-6326 affects HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v20190419) and HP LaserJet Pro MFP M28-M31 Printer series (before v20190426). The vulnerability is a Buffer Overflow in the device’s embedded web server, triggered by processing memory operations without pr...

CVE-2019-6325

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery...

CVE-2019-6325

CVE-2019-6325 affects HP Color LaserJet Pro M280-M281 Multifunction Printer series (before 20190419) and HP LaserJet Pro MFP M28-M31 Printer series (before 20190426). The vulnerability is a Cross-Site Request Forgery in the printer’s embedded web server. HP’s advisory (HPSBPI03619 rev. 2) notes t...

CVE-2019-6324

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before 20190419) and HP LaserJet Pro MFP M28-M31 Printer series (before 20190426) are affected by a stored XSS in the wireless configuration page due to insufficient input validation on the embedded web server. This could allow an atta...

CVE-2019-6324

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server potentially vulnerable to stored XSS in wireless configuration page...

CVE-2019-6323

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server potentially vulnerable to reflected XSS in wireless configuration page...

CVE-2019-6323

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before 20190419) and HP LaserJet Pro MFP M28-M31 Printer series (before 20190426) expose a vulnerability in the embedded web server’s wireless configuration page that allows reflected cross-site scripting (XSS). Root cause: lack of pro...

The vulnerability of HP Color LaserJet Pro printer’s microprogramming software, related to the falsification of inter-site requests, allows a perpetrator to trigger a service failure.

The vulnerability of HP Color LaserJet Pro printer microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of HP Color LaserJet Pro printer microprogramming software, related to the falsification of inter-site requests, allows a perpetrator to compromise the confidentiality and integrity of protected information.

The vulnerability of HP Color LaserJet Pro printer microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

HPSBPI03619 rev. 2 - Certain HP LaserJet Pro and MFP Printers, Multiple Potential Security Vulnerabilities

Potential Security Impact XSS, CSRF, Potential Buffer Overflow Reported by: Mario Rivas and Daniel Romero, NCC Group VULNERABILITY SUMMARY HP has identified potential security vulnerabilities with certain HP printers. The vulnerabilities could be exploited to perform Cross-site scripting XSS,...

CVE-2019-6318

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code...

HP LaserJet Printers Authentication Bypass Vulnerability

HP LaserJet Printers could allow a remote attacker to bypass security restrictions, caused by missing authentication for critical function. By sending a specially crafted request, an attacker could exploit this vulnerability to change configuration settings or gain administrative access. Copyrigh...

HP LaserJet P3015 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP LaserJet P3015 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

HP LaserJet P4014/P4015 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP LaserJet P4014/P4015 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

HP Color LaserJet CP4525 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP Color LaserJet CP4525 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

HP LaserJet 5200 HP LaserJet 5200 Authentication Bypass

Exploit Title : HP LaserJet 5200 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

HP Color LaserJet CP4025 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP Color LaserJet CP4025 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

HP Printers CSRF Vulnerability (Oct 2018)

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129000052 and other firmware versions. This vulnerability is known as cross-site request forgery CSRF, and could potentially be exploited remotely to allow elevation of privilege. Copyright C 2018...

Command Execution Vulnerability in HP Color LaserJet Pro M252 Series

The HP Color LaserJet Pro M252 is a color laser printer manufactured by HP Trading Shanghai Co. A command execution vulnerability exists in the HP Color LaserJet Pro M252 series, which can be exploited by an attacker to execute remote commands...

Command execution vulnerability in multiple series of HP printers

HP LaserJet M1536,HP Officejet Pro X476,HP OfficeJet Pro 8740,HP LaserJet Professional M1200 are laser all-in-one PCs manufactured by HP Trading Shanghai Co. A command execution vulnerability exists in multiple series of HP printers, which can be exploited by an attacker to execute arbitrary...