NetSight
critical9.8

CVE-2019-6318

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution …

Impact

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.

Affected products

VendorProductAffected versions
HpColor Laserjet Cm4540 Mfp Firmware
before 2309010_581401
HpColor Laserjet Enterprise Cp5525 Firmware
before 2309010_581402
HpColor Laserjet Enterprise M553 Firmware
before 2309010_581409
HpColor Laserjet Enterprise M552 Firmware
before 2309010_581409
before 2407081_00060
HpColor Laserjet Managed M553 Firmware
before 2309010_581409
before 2407081_000601
HpColor Laserjet Enterprise M651 Firmware
before 2309010_581418
before 2407081_000585
HpColor Laserjet Managed M651 Firmware
before 2309010_581418
before 2407081_000585
HpColor Laserjet Enterprise M652 Firmware
before 2407081_000586
HpColor Laserjet Enterprise M653 Firmware
before 2407081_000586
HpColor Laserjet Enterprise M750 Firmware
before 2309010_581423
HpColor Laserjet Enterprise M855 Firmware
before 2309010_581419
before 2407081_000589
HpColor Laserjet Enterprise Mfp M577 Firmware
before 2309010_581408
before 2407081_000571

Weakness classification

References