Intel 2021.2 IPU - BIOS Firmware February 2022 Security Updates

Intel has informed HP of potential security vulnerabilities identified in BIOS firmware for some Intel® Processors which may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has...

HP UEFI Firmware February 2022 Security Updates

Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities. HP has identified affected platforms and corresponding...

HP Security Manager, Web Jetadmin, Digital Sending Software, and Easy Printer Manager - Potential XXE-based attacks

HP Security Manager, Web Jetadmin, Digital Sending Software, and Easy Printer Manager bundled in certain print driver packages may be vulnerable to potential XXE XML External Entity based attacks. HP has provided software updates to remediate the issue for the potentially affected products listed...

CVE-2022-23456

Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...

CVE-2022-23456

Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...

Arbitrary file deletion

Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...

CVE-2022-23456

Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...

CVE-2022-23456

CVE-2022-23456 relates to HP Support Assistant and is described in multiple sources as a potential arbitrary file deletion vulnerability. The connected Red Hat/EU ENISA/Nessus entries corroborate the issue title but do not introduce new technical details beyond what HP documents state. The HP adv...

PT-2022-15999

Name of the Vulnerable Software and Affected Versions HP Support Assistant affected versions not specified Description A potential arbitrary file deletion issue has been identified. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2022-23456: Undefined Security Weakness

Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...

Kyocera Printer Detection (PJL)

Printer Job Language PJL based detection of Kyocera printer devices. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

PT-2022-1904

Name of the Vulnerable Software and Affected Versions HP Print devices affected versions not specified Description The issue is related to a buffer overflow in the PostScript interpreter of HP Print devices, which can lead to information disclosure, denial of service, or remote code execution. An...

PT-2022-1905

Name of the Vulnerable Software and Affected Versions HP Print devices affected versions not specified Description The issue is related to a stack-based buffer overflow in the firmware of HP Print devices. This could allow a remote attacker to execute arbitrary code, potentially leading to...

Multiple vulnerabilities in HP Support Assistant

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files. HP strives to address all security issues with HP...

CVE-2021-3965

Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews...

CVE-2021-3965

Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews...

Code injection

Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews...

CVE-2021-3965

Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews...

CVE-2021-3965

Technical details (affected products, impact specifics, exploitability, remediation) are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.

CVE-2021-3965: Authorization Bypass Through User-Controlled Key

Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews...