Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 0.3%
probabilidad de explotación
0.3%top 78% de las CVE
explotación observada
noninguna fuente lo reporta
Certain HP DeskJet All in One devices
may be vulnerable to remote code execution caused by a buffer overflow when
specially crafted Web Services for Devices (WSD) scan requests are improperly
validated and handled by the MFP.
WSD
Scan is a Microsoft Windows–based network scanning protocol that allows a PC to
discover scanners (and MFPs) on a network and send scan jobs to them without
requiring vendor specific drivers or utilities.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
HP Inc · HP DeskJet 2800e All-in-One Printer seriesHP Inc · HP DeskJet 4200 All-in-One Printer seriesHP Inc · HP DeskJet 4200e All-in-One Printer seriesHP Inc · HP DeskJet Ink Advantage 2800 All-in-One Printer seriesHP Inc · HP DeskJet Ink Advantage 4200 All-in-One Printer seriesHP Inc · HP DeskJet Ink Advantage Ultra 4900 series