Null pointer dereference

u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior to IPS System 2020.2...

CVE-2020-11158

CVE-2020-11158 denotes a null pointer dereference in the HP OfficeJet Pro 8210 jbig2 filter caused by missing validation of the PDF font array, leading to a denial of service. Affected component: the jbig2 filter in HP OfficeJet Pro 8210. Root cause: lack of check/validation of PDF font array. Im...

CVE-2020-11158

u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior to IPS System 2020.2...

HP Printers Multiple Vulnerabilities - Ripple20 (HPSBPI03666)

Multiple HP printers are vulnerable to multiple vulnerabilities in the Treck IP stack Ripple20. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The vulnerability of microprogrammed software in HP PageWide and HP OfficeJet Pro printers stems from the use of an assert() or similar operator function, which allows a malicious actor to trigger a service failure.

The vulnerability of Microprogrammed Software in HP PageWide and HP OfficeJet Pro printers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to trigger a service failure using a specially created file...

The vulnerability of microprogrammed software in printers such as LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed lies in insufficient data validation, allowing attackers to execute arbitrary codes.

The vulnerability of Microprogrammed Software for printers such as LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

CVE-2019-6332

A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting XSS. Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A;...

Cross site scripting

A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting XSS. Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A;...

CVE-2019-6332

A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting XSS. Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A;...

HPSBPI03634 rev. 1 - HP OfficeJet Mobile and Sprocket Printers KNOB Vulnerability

Potential Security Impact Disclosure and Modification of Information Source: HP, HP Product Security Response Team PSRT Reported by: N/A VULNERABILITY SUMMARY Certain HP printers are vulnerable to the Key Negotiation of Bluetooth KNOB attack. Data over Bluetooth can be intercepted, decrypted, and...

HP Printers Multiple Vulnerabilities (HPSBPI03630)

A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CVE-2019-6334

HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential execution of arbitrary code...

CVE-2019-6334

CVE-2019-6334 affects HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers. The issue concerns a signature-check mechanism for installed applications that may allow arbitrary code execution. The HP advisory (HP C06447795) confirms a risk of execution of arbitrary code and pr...

HPSBPI03630 rev. 2 - HP Inkjet Printers - Buffer Overflow and Local Disclosure of Information

Potential Security Impact Buffer Overflow, Disclosure of Information Source: HP, HP Product Security Response Team PSRT Reported By: XiaoyuHe@VARAS VULNERABILITY SUMMARY A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer...

HP Printers RCE Vulnerability (HPSBPI03596)

Multiple HP printers are prone to a remote code execution RCE vulnerability in the solution application signature checking. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2019-6318

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code...

HP Printers CSRF Vulnerability (Oct 2018)

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129000052 and other firmware versions. This vulnerability is known as cross-site request forgery CSRF, and could potentially be exploited remotely to allow elevation of privilege. Copyright C 2018...

HP Jetdirect Path Traversal Arbitrary Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule 'HP Jetdirect Path Traversal Arbitrary Code Execution', 'Description' = %q The module exploits a path traversal via...

HP Jetdirect - Path Traversal Arbitrary Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule 'HP Jetdirect Path Traversal Arbitrary Code Execution', 'Description' = %q The module exploits a path traversal via...

HP Ink Printers RCE Vulnerabilities (Faxploit)

Two security vulnerabilities have been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack or static buffer overflow, which could allow remote code execution RCE. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might...