CVE-2021-3440

Technical details for CVE-2021-3440 are not publicly available in the provided documents. Affected product is HP Print and Scan Doctor (Windows) with local privilege escalation noted. Monitor for updates from HP/vendors for specifics and patches.

Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers - Information disclosure

Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure. Update your printer firmware...

Certain HP LaserJet, LaserJet Managed, PageWide, PageWide Managed printers - Potential buffer overflow

Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed products may be vulnerable to potential buffer overflow. Update your printer firmware...

HP Print and Scan Doctor 安全漏洞

HP Print and Scan Doctor is a free tool for Windows from Hewlett-Packard HP that helps solve printing and scanning problems. HP Print and Scan Doctor has a security vulnerability that could be exploited by an attacker to potentially allow local privilege escalation...

PVS Target Devices experience long boot times with HP servers and Virtual Connects

When streaming a vDisk to a target device on a hypervisor leveraging HP servers and virtual connects, admins may see longer than usual boot time...

CVE-2021-3441

A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting XSS...

CVE-2021-3662

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS...

CVE-2021-3662

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS...

CVE-2021-3441

A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting XSS...

Cross site scripting

A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting XSS...

Cross site scripting

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS...

CVE-2021-3441

In HP OfficeJet 7110 Wide Format ePrinter firmware, a Cross-Site Scripting (XSS) vulnerability affects the device via its web interface due to insufficient input filtering/escaping. The issue is documented across multiple sources (HP advisory HPSBPI03742, OpenVAS entry HP OfficeJet 7110 XSS Vulne...

CVE-2021-3441

A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting XSS...

CVE-2021-3662

CVE-2021-3662 affects HP Enterprise LaserJet and PageWide MFPs, with a stored cross-site scripting (XSS) vulnerability in printer software. The issue arises from insufficient input filtering/escaping, enabling user-supplied data to be stored and potentially executed in a privileged context. Publi...

CVE-2021-3662

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS...

Hp OfficeJet 7110 Wide Format Eprinter 跨站脚本漏洞

Hp OfficeJet 7110 Wide Format Eprinter is a duplex electronic printer from Hewlett-Packard Hp. A cross-site scripting vulnerability exists in the HP OfficeJet 7110 Wide Format ePrinter, which stems from the software's lack of effective filtering and escaping of user-submitted input parameters...

HP OfficeJet Cross Site Scripting

A stored cross-site scripting vulnerability exists in HP OfficeJet. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

HP Security Manager - Potential Remote Code Execution and Denial of Service

HP Security Manager may be vulnerable to potential remote code execution and denial of service. Update your printer software...

A week in security (Sept 13 – Sept 19)

Last week on Malwarebytes Labs Why backups aren’t a “silver bullet” against ransomware, with Matt Crape: Lock and Code S02E17 The many tentacles of Magecart Group 8 Apple releases emergency update: Patch, but don’t panic Update now! Google Chrome fixes two in-the-wild zero-days Parts of the Dark...

HP Omen Hub Exposes Millions of Gamers to Cyberattack

Millions of devices running the HP Omen Gaming Hub were using on a driver with a bug that could give attackers kernel-mode access without administrator privileges. HP has since released a patch, but a new report on the flaw CVE-2021-3437 from researchers from SentinelLabs details how the gaming...