PT-2024-37751 · Honeywell · Honeywell Pc42D +1

Name of the Vulnerable Software and Affected Versions: Honeywell PC42t, PC42tp, and PC42d Printers versions T10.19.020016 through T10.20.060397 Description: The issue allows an attacker to inject malicious code, potentially leading to information disclosure, session theft, or client-side request...

CVE-2024-27175

Remote Command program allows an attacker to read any file using a Local File Inclusion vulnerability. An attacker can read any file on the printer. As for the affected products/models/versions, see the reference URL...

CVE-2024-27175

CVE-2024-27175 affects Toshiba e-STUDIO/MFP devices, where a Local File Inclusion vulnerability allows an attacker to read arbitrary files on the printer via unsafely processed input. The root cause is insufficient validation of filename input, enabling information disclosure via the device UI or...

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO, which originates from programs running under root privileges that, if hijacked by some means, could execute arbitrary code on the multifunction device...

Hp LaserJet Pro Printer 安全漏洞

The HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP in the United States. A security vulnerability exists in the Hp LaserJet Pro Printer that originates from a user with device administrative privileges being able to change the existing SMTP server settings on the device...

Hp LaserJet Pro Printer 跨站脚本漏洞

The HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP. A cross-site scripting vulnerability exists in the Hp LaserJet Pro Printer that originates from the device web management interface being susceptible to cross-site scripting attacks...

HP OfficeJet Pro 安全漏洞

HP OfficeJet Pro is an all-in-one printer from Hewlett-Packard HP. A security vulnerability exists in HP OfficeJet Pro that originates from a possible denial-of-service attack when an incorrect eSCL URL GET request is used...

FUJIFILM Business Innovation Corp. printers vulnerable to cross-site request forgery

Overview Multiple printers provided by FUJIFILM Business Innovation Corp. contain a cross-site request forgery vulnerability CWE-352. Junnosuke Kushibiki, Ryu Kuki, Masataka Mizokuchi, Takayuki Sasaki, and Katsunari Yoshioka of Yokohama National University reported this vulnerability to IPA...

CVE-2023-6229

Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07...

CVE-2023-6231

Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and...

The vulnerability of the IPP microprogramming software for Canon printers of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, MAXIFY series allows a hacker to execute arbitrary code.

The vulnerability of the IPP microprogramming software for Canon printers of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, and MAXIFY series is related to buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of HP LaserJet Pro printer’s microprogramming software lies in the copying of buffers without checking the size of the input data, allowing a hacker to execute arbitrary code.

The vulnerability of HP LaserJet Pro printer microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

VulnCheck KEV: CVE-2020-23575

A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successful exploitation of this vulnerability could allow an attacker to retrieve or view arbitrary files from the affected server...

PT-2023-8589 · Lexmark · Lexmark Cx331Adwe

Name of the Vulnerable Software and Affected Versions: Lexmark CX331adwe affected versions not specified Description: A vulnerability in one of the SE menu routines of Lexmark printers can be leveraged by an attacker to execute arbitrary code. The issue exists due to a lack of authentication befo...

PT-2023-26510 · Seiko Epson · Seiko Epson Printer Web Config

Name of the Vulnerable Software and Affected Versions: SEIKO EPSON printer Web Config affected versions not specified Description: The issue is related to an improper input validation vulnerability in the Web Config software of SEIKO EPSON printers. This vulnerability allows a remote attacker to...

CVE-2023-32085 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

...

Hp LaserJet Pro Printer 安全漏洞

The HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP in the United States. The Hp LaserJet Pro Printer suffers from a security vulnerability that originates from susceptibility to buffer overflow, which can be exploited by an attacker to cause a denial of service...

Hp LaserJet Pro Printer 缓冲区错误漏洞

The HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP in the United States. A security vulnerability exists in Hp LaserJet Pro Printer that stems from the presence of a stack-based buffer overflow...

Huawei BiSheng-WNM 安全漏洞

Huawei BiSheng-WNM is a Huawei printer from Huawei, a Chinese company. A security vulnerability exists in Huawei BiSheng-WNM version 3.0.0.325, which stems from an input misinterpretation vulnerability...

(Pwn2Own) Lexmark MC3224i lbtraceapp Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Lexmark MC3224i printers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...