NetSight
IP …
high8.8

CVE-2019-6325

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v.

Impact

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery.

Affected products

VendorProductAffected versions
HpT6b80a Firmware
before 2019-04-19
HpT6b83a Firmware
before 2019-04-19
HpT6b81a Firmware
before 2019-04-19
HpT6b82a Firmware
before 2019-04-19
HpW2g54a Firmware
before 2019-04-26
HpW2g55a Firmware
before 2019-04-26
HpY5s53a Firmware
before 2019-04-26
HpY5s55a Firmware
before 2019-04-26
HpY5s50a Firmware
before 2019-04-26
HpY5s54a Firmware
before 2019-04-26

Weakness classification

CWE-352

References