PT-2020-19293

HP Device Manager – CVE-2020-6925, CVE-2020-6926, CVE-2020-6927 https://nickbloor.co.uk/2020/10/05/hp-device-manager-cve-2020-6925-cve-2020-6926-cve-2020-6927/...

HP Device Manager Cavalcade of Critical CVEs (CVE-2020-6925:6927): What You Need to Know

HP released a security bulletin on Sept. 25, 2020, disclosing a set of vulnerabilities in HP Device Manager that—when some are chained together—can result in a remote attacker gaining SYSTEM privileges on the target node. Note: A backdoor database user exists in the PostgreSQL database used by HP...

h30061.www3.hp.com Cross Site Scripting vulnerability OBB-1375810

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

HPSBHF03690 rev. 3 - NVIDIA GPU Display Driver September 2020 Security Updates

Potential Security Impact Escalation of Privilege, Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver...

HPSBPI03691 rev. 1 - HP Linux Imaging and Printing Software - Potential Memory Buffer Overflow

Potential Security Impact Memory Buffer Overflow Source: HP, HP Product Security Response Team PSRT Reported by: Kevin Backhouse of GitHub Security Lab VULNERABILITY SUMMARY The HP Linux Imaging and Printing HPLIP software may potentially be affected by memory buffer overflow. RESOLUTION HP has...

HPSBHF03689 rev. 2 - HP Device Manager Weak Cipher Implementation, Remote Method Invocation, and Elevation of Privilege

Potential Security Impact Susceptibility to dictionary attacks, unauthorized remote access to resources, and elevation of privilege. Source: HP, HP Product Security Response Team PSRT Reported By: Nick Bloor VULNERABILITY SUMMARY Potential vulnerabilities have been identified with certain version...

HP iLO 3 < 1.93 / HP iLO 4 < 2.75 / HP iLO Superdome 4 < 1.64 / HP iLO 5 < 2.18 / HP Moonshot/Edgeline iLO 5 < 2.30 Ripple20 Multiple vulnerabilities

Multiple security vulnerabilities have been identified in Integrated Lights-Out firmware generation 3 iLO 3 prior to version 1.93, generation 4 iLO 4 prior to version 2.75, and generation 5 iLO 5 prior to version 2.18. Superdome generation 4 versions prior to 1.64 and Moonshot/Edgeline generation...

HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)

Potential Security Impact Cross-site Scripting XSS Source: HP, HP Product Security Response Team PSRT Reported by: The jQuery Foundation VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs. In jQuery versions before 3.5.0, passing HTML fro...

Certain HP Printers and MFP products - Cross-Site Scripting (XSS)

A potential security vulnerability has been identified for certain HP printers and MFPs. In jQuery versions before 3.5.0, passing HTML from untrusted sources may execute untrusted code. Update your printer firmware...

hp.medselfed.com Cross Site Scripting vulnerability OBB-1339764

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

HPSBPI03686 rev. 1 - Certain HP Enterprise MFP products: Elevation of Privilege

Potential Security Impact Elevation of privilege Source: HP, HP Product Security Response Team PSRT Reported by: HP VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP multifunction printers MFPs. The vulnerability may lead to elevation of privilege when...

HPSBPI03687 rev. 3 - Certain HP LaserJet Printer and MFP Products and JetDirect Print Server Products - Information Disclosure

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: Broadcom VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs. A Broadcom wireless vulnerability known as "Kr00k" CVE-2019-1512...

hp-city.com Cross Site Scripting vulnerability OBB-1329889

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

HPSBHF03694 rev. 1 - AMD® Radeon™ Graphics Driver D3DKMTEscape Handler Denial of Service

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: AMD VULNERABILITY SUMMARY AMD has informed HP of a potential security vulnerability identified in the AMD® Radeon™ Graphics Drivers for Windows which may allow denial of service. For detail...

hp-city.com Cross Site Scripting vulnerability OBB-1317835

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-11158

u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior to IPS System 2020.2...

Null pointer dereference

u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior to IPS System 2020.2...

CVE-2020-11158

CVE-2020-11158 denotes a null pointer dereference in the HP OfficeJet Pro 8210 jbig2 filter caused by missing validation of the PDF font array, leading to a denial of service. Affected component: the jbig2 filter in HP OfficeJet Pro 8210. Root cause: lack of check/validation of PDF font array. Im...

CVE-2020-11158

u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior to IPS System 2020.2...

CVE-2020-11158: NULL Pointer Dereference

u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior to IPS System 2020.2...