CVE-2026-4682: fallo de gravedad alta en HP DeskJet 2800e All-in-One Printer series
Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear HP DeskJet 2800e All-in-One Printer series+ Monitorear HP DeskJet 4200 All-in-One Printer series
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 0.3%
Certain HP DeskJet All in One devices
may be vulnerable to remote code execution caused by a buffer overflow when
specially crafted Web Services for Devices (WSD) scan requests are improperly
validated and handled by the MFP.
WSD
Scan is a Microsoft Windows–based network scanning protocol that allows a PC to
discover scanners (and MFPs) on a network and send scan jobs to them without
requiring vendor specific drivers or utilities.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
HP Inc · HP DeskJet 2800e All-in-One Printer seriesHP Inc · HP DeskJet 4200 All-in-One Printer seriesHP Inc · HP DeskJet 4200e All-in-One Printer seriesHP Inc · HP DeskJet Ink Advantage 2800 All-in-One Printer seriesHP Inc · HP DeskJet Ink Advantage 4200 All-in-One Printer seriesHP Inc · HP DeskJet Ink Advantage Ultra 4900 series