CVE-2026-4682: falha de alta gravidade em HP DeskJet 2800e All-in-One Printer series
Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar HP DeskJet 2800e All-in-One Printer series+ Monitorar HP DeskJet 4200 All-in-One Printer series
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.3%
Certain HP DeskJet All in One devices
may be vulnerable to remote code execution caused by a buffer overflow when
specially crafted Web Services for Devices (WSD) scan requests are improperly
validated and handled by the MFP.
WSD
Scan is a Microsoft Windows–based network scanning protocol that allows a PC to
discover scanners (and MFPs) on a network and send scan jobs to them without
requiring vendor specific drivers or utilities.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
HP Inc · HP DeskJet 2800e All-in-One Printer seriesHP Inc · HP DeskJet 4200 All-in-One Printer seriesHP Inc · HP DeskJet 4200e All-in-One Printer seriesHP Inc · HP DeskJet Ink Advantage 2800 All-in-One Printer seriesHP Inc · HP DeskJet Ink Advantage 4200 All-in-One Printer seriesHP Inc · HP DeskJet Ink Advantage Ultra 4900 series