NetSight
IP …
critical9.8

CVE-2023-35175

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forg…

Impact

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.

Affected products

VendorProductAffected versions
HpW1a75a Firmware
before 002_2322c
HpW1a76a Firmware
before 002_2322c
HpW1a77a Firmware
before 002_2322c
HpW1a78a Firmware
before 002_2322c
HpW1a79a Firmware
before 002_2322c
HpW1a80a Firmware
before 002_2322c
HpW1a81a Firmware
before 002_2322c
HpW1a82a Firmware
before 002_2322c
HpLaserjet Pro M453-M454 W1y40a Firmware
before 002_2322c
HpLaserjet Pro M453-M454 W1y41a Firmware
before 002_2322c
HpLaserjet Pro M453-M454 W1y43a Firmware
before 002_2322c
HpLaserjet Pro M453-M454 W1y44a Firmware
before 002_2322c

Weakness classification

CWE-918

References