629 matches found
HPSBPI02463 SSRT090061 rev.2 - HP LaserJet Printers, HP Color LaserJet Printers, Remote Cross Site Scripting (XSS)
Potential Security Impact Remote Cross Site Scripting XSS VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain HP LaserJet printers, HP Color LaserJet printers and HP Digital Senders. The vulnerabilities could be exploited remotely by Cross Site Scripting XSS...
Intel Connectivity Performance Suite May 2026 Security Update
Intel has informed HP of a potential security vulnerability in some Intel® Connectivity Performance Suite software installers, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the...
HP Device Manager Vulnerability Update (5.0.16)
Potential vulnerabilities have been identified in HP Device Manager versions prior to HPDM 5.0.16. HP is releasing mitigation for the potential vulnerabilities as part of the 5.0.16 release. All of the identified vulnerabilities listed above were addressed and fixed as part of HP Device Manager...
Certain HP OfficeJet Pro Printers - Information Disclosure
Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing CORS is misconfigured, potentially allowing unauthorized web origins to access device resource. Update your printer firmware...
Intel PROSet/Wireless WiFi Software November 2025 Security Update
Intel has informed HP of potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software, which might allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP...
Intel Ethernet I219 Software February 2025 Security Update
Intel has informed HP of potential security vulnerabilities in Intel® Ethernet Connection I219 Series, which might allow denial of service. Intel is releasing updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP has identifi...
Certain HP LaserJet Pro Printers – Potential Denial of Service
Certain HP LaserJet Pro printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer via IPP Internet Printing Protocol. Update your printer firmware...
UC Software - Improper Neutralization of Special Elements Used in an OS Command
A potential vulnerability was discovered in certain Poly voice products. A flaw in the neutralization of data passed in the input fields within the web UI could result in an authenticated command injection. HP has identified affected products and corresponding firmware minimum versions that...
Certain HP Enterprise LaserJet, LaserJet Managed printers - Potential denial of service, potential Cross Site Scripting (XSS)
Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to WS-Print request and potential injections of Cross Site Scripting via jQuery-UI. Update your printer firmware...
Certain HP LaserJet Pro Print Products - Potential Remote Code Execution, Information Disclosure
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model. Update the printer firmware...
Intel® PROSet/Wireless WiFi, Intel vPro® CSME WiFi, and Killer™ WiFi November 2022 Security Update
Intel has informed HP of a potential vulnerability identified in some Intel® PROSet/Wireless WiFi, Intel vPro® CSME WiFi, and Killer™ WiFi products, which might allow denial of service. Intel is releasing a firmware update to mitigate this potential vulnerability. Intel has released updates to...
Intel Unite® Client for Windows June 2021 security updates
Intel has informed HP of potential security vulnerabilities in the Intel Unite® Client for Windows which may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP has...
HPSBGN03575 rev. 1 - BIOS Password Extraction Vulnerability on Certain HP Notebooks
Potential Security Impact The unencrypted password was able to be accessed by CMOS tools. Source: HP, HP Product Security Response Team PSRT Reported By: Bader Zaidan VULNERABILITY SUMMARY A BIOS password extraction vulnerability has been reported on certain consumer notebooks. The BIOS password...
HPSBGN03561 rev.2 - HP Support Assistant Potential Escalation of Privilege
Potential Security Impact Escalation of privilege and unauthorized modification of directories or files. Source: HP, HP Product Security Response Team PSRT Reported by: Danny Wei of Tencent's Xuanwu Lab VULNERABILITY SUMMARY The vulnerability allows attacker to extract binaries into protected fil...
HPSBPI02851 SSRT101078 rev.2 - Certain HP LaserJet Pro Printers, Unauthorized Access to Data
Potential Security Impact Unauthorized access to data VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP LaserJet Pro printers. The vulnerability could be exploited remotely to gain unauthorized access to data. RESOLUTION HP has provided firmware updates...
HPSBPI02807 SSRT100928 rev.2 - HP LaserJet Pro 400 Multi Function Printers, Remote Unauthorized Access
Potential Security Impact Remote unauthorized access VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain HP LaserJet Pro 400 Multifunction Printers MFP. The vulnerabilities could be remotely exploited to allow unauthorized access. RESOLUTION HP has provided...
Nuvoton ECHD Key Security Update
Nuvoton has informed HP of a potential security vulnerability identified in Nuvoton TPM NPCT7xx models used in certain HP PC products, which might allow information disclosure. Nuvoton has released firmware mitigation for the potential vulnerability. HP has identified affected platforms and...
Intel 2024.3 IPU – BIOS Security Updates
Intel has informed HP of potential security vulnerabilities for some Intel® Processors, which might allow escalation of privilege, denial of service or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Intel has released updates to...
Intel Xeon Processor August 2024 Security Update
Intel has informed HP of potential security vulnerabilities in some Intel® Xeon® Processors, which might allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...
AMD Client UEFI Firmware August 2024 Security Update
AMD has informed HP of potential security vulnerabilities identified in some AMD client platform firmware components, which might allow arbitrary code execution, escalation of privilege, information disclose, or denial of service. AMD is releasing firmware updates to mitigate these vulnerabilitie...
Intel Thunderbolt Controller February 2024 Security Update
Intel has informed HP of a potential security vulnerability in some Intel® Thunderbolt™ Controllers, which might allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has...
UC Software - Use of Insufficiently Random Values
A potential vulnerability was discovered in certain Poly devices. A potential flaw allows an attacker to predict a session and piggyback onto an active administrator session of the web server. The potential vulnerability is dependent on the administrator maintaining an active session. HP has...
Certain HP OfficeJet Pro Printers – Potential Denial of Service
Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when sending a SOAP message to the service on TCP port 3911 that contains a body but no header. Update your printer firmware...
Certain HP Displays - Theft Deterrence
A potential security vulnerability has been identified in certain HP Displays supporting the Theft Deterrence feature which may allow a monitor’s Theft Deterrence to be deactivated. HP has identified affected monitors and corresponding SoftPaqs with minimum versions that mitigate the potential...
Certain HP LaserJet Pro Print Products - Potential Buffer Overflow
Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser. Update the printer firmware...
Intel 2022.2 IPU BIOS Security Updates
Intel has informed HP of a potential security vulnerability in some Intel® Processors, which might allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified...
HPSBGN03722 rev. 1 - HP Support Assistant Weak ACL and DLL Loading Vulnerability
Potential Security Impact Execution of arbitrary code. Source: HP, HP Product Security Response Team PSRT Reported by: Rémi ESCOURROU @remiescourrou VULNERABILITY SUMMARY A weak ACL may potentially allow an unauthorized person to load arbitrary code. RESOLUTION A patch was released on March 10,...
HPSBHF03553 rev 2 - HP ThinPro Escalation of Privilege via Command Line Shell
Potential Security Impact Local unauthorized escalation of privilege on an HP thin client device. VULNERABILITY SUMMARY A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system. The vulnerability could result in a local unauthorized...
HPSBGN03438 rev.2 - HP Support Assistant, Local Authentication Bypass
Potential Security Impact Authentication Bypass Source: HewlettPackard Company, HP Software Security Response Team VULNERABILITY SUMMARY A potential security vulnerability has been identified in HP Support Assistant. This vulnerability could be exploited locally to allow authentication bypass...
HPSBHF03439 rev.2 - HP Commercial PCs with Sure Start, Local Denial of Service
Potential Security Impact Denial of Service DoS Source: HewlettPackard Company, HP Software Security Response Team VULNERABILITY SUMMARY HP has identified a potential security vulnerability with the Sure Start implementation on certain 2015 commercial platforms. This vulnerability could be...
HPSBMI02573 SSRT100227 rev.1 - Palm webOS, webOS Doc Viewer, Execution of Arbitrary Code
Potential Security Impact Execution of arbitrary code VULNERABILITY SUMMARY A potential security vulnerability has been identified with Palm webOS Doc Viewer. This vulnerability could be exploited to execute arbitrary code. RESOLUTION The vulnerability can be resolved by updating affected devices...
HPSBPI02185 SSRT071290 rev.4 - HP Jetdirect Running ftp, Remote Denial of Service (DoS)
Potential Security Impact Remote Denial of Service DoS VULNERABILITY SUMMARY A potential vulnerability has been identified with HP Jetdirect running ftp. The vulnerability could be exploited remotely to create a Denial of Service DoS. RESOLUTION This vulnerability can be resolved by upgrading the...
HP Hotkey Support – Escalation of Privilege
A potential security vulnerability has been identified in the HPAudioAnalytics service included in the HP Hotkey Support software, which might allow escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability. HP has identified affected platforms and...
Intel UPLR2 Xeon Processor BIOS Security Updates
Intel has informed HP of potential security vulnerabilities in firmware for some Intel® Xeon® Processors, which might allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released...
UC Software - Hidden Functionality
A potential vulnerability was discovered in certain Trio devices. An attacker can enable a hidden configuration with knowledge of the administrator password, physical access to the device, and the ability to bypass the authentication process of the hidden configuration to gain a shell with elevat...
Certain HP LaserJet Pro print products - Potential elevation of privilege and/or information disclosure
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints. Update the printer firmware...
Realtek HD Audio Driver December 2022 Security Update
HP has been informed of a potential security vulnerability identified in some Realtek® High-Definition Audio Windows drivers which might allow denial of service system crash. Realtek has released updated drivers to mitigate the potential vulnerability. Realtek released updates to mitigate the...
HP ThinPro OS - File System Unlocked in HP ThinPro 7.2 Service Pack 8 (SP8)
A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 SP8. The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 SP9. HP has released Service Pack 10 SP10 to remediate the potential vulnerability introduced in SP8. Upgrade t...
HPSBPI03686 rev. 1 - Certain HP Enterprise MFP products: Elevation of Privilege
Potential Security Impact Elevation of privilege Source: HP, HP Product Security Response Team PSRT Reported by: HP VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP multifunction printers MFPs. The vulnerability may lead to elevation of privilege when...
HPSBHF03595 rev. 6 - LoJax UEFI Rootkit
Potential Security Impact Elevation of Privilege, Information Disclosure, Loss of Confidentiality, Loss of Integrity. Source: HP, HP Product Security Response Team PSRT Reported by: ESET Research VULNERABILITY SUMMARY HP has identified a potential security vulnerability with a UEFI rootkit LoJax...
HPSBPI03580 rev. 2 - Cross Site Request Forgery Vulnerability for Certain HP Enterprise and PageWide Printers
Potential Security Impact Elevation of Privilege. Reported by: Mohamed Abdelbaset Elnoby VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP Enterprise and PageWide printers and MFPs. This vulnerability is known as Cross Site Request Forgery and could...
HPSBPI03546 rev.3 - HP LaserJet Printers and MFPs, HP OfficeJet Enterprise Printers, Remote Disclosure of Information
Potential Security Impact Remote disclosure of information Source: HP Development Company, HP Product Security Response Team VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP LaserJet Printers and MFPs, and certain HP OfficeJet Enterprise printers and...
HPSBHF03310 rev.2 - HP Thin Clients running Windows Embedded Standard 7 (WES7) or Windows Embedded Standard 2009 (WES09) with HP Easy Deploy, Remote Elevation of Privilege, Execution of Code
Potential Security Impact Remote elevation of privilege, execution of code VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain HP Thin Clients running Windows Embedded Standard 7 WES7 and Windows Embedded Standard 2009 WES09 and all versions of HP Easy Deplo...
HPSBPI02226 SSRT061274 rev.2 - HP Help and Support Center Running on HP Notebook Computers Running with Windows XP, Remote Unauthorized Access
Potential Security Impact Remote unauthorized access VULNERABILITY SUMMARY A potential security vulnerability has been identified in HP Help and Support Center running on HP Notebook Computers running with Windows XP. The vulnerability could be remotely exploited to allow unauthorized access to t...
HPSBPI01026 SSRT2397 rev.3 - HP Web Jetadmin, Remote Unauthorized Access, Denial of Service (DoS)
Potential Security Impact Remote unauthorized access to files, Denial of Service DoS VULNERABILITY SUMMARY A potential vulnerability has been identified with HP Web Jetadmin. The vulnerability could be exploited to allow remote unauthorized access to files or to create a Denial of Service DoS...
Poly Video - Sensitive Data Might Be Written to Log File
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center TAC to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration...
HP Linux Imaging and Printing Software - Use of DSA Key
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm DSA. HP has identified affected versions and the minimum software version that...
Intel 2024.3 IPU – Chipset Firmware Security Update
Intel has informed HP of potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Intel® Active Management Technology AMT, Intel® Standard Manageability, Intel® PROSet/Wireless and Intel® Killer™ Wi-Fi software, which might allow escalation of privilege, deni...
Certain HP LaserJet Pro Printers – Potential Information Disclosure
A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed. Update your printer...
Certain HP LaserJet Pro – Potential Cross-Site Scripting (XSS)
Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting XSS attack via the web management interface of the device. Update your printer firmware...