Vulnerabilidades em HP Inc.

147 resultados
Análise Vexday

O portfólio de vulnerabilidades da HP Inc. reúne 143 CVEs catalogadas, com 15 classificadas como críticas e nenhuma atualmente confirmada em exploração ativa no catálogo CISA KEV — desempenho abaixo da média geral do catálogo. Ainda assim, a CVE-2017-2741 exige atenção prioritária: embora não esteja no KEV, seu índice EPSS de 0,8489 indica alta probabilidade de exploração, tornando-a o risco mais imediato a ser tratado. O tipo de falha mais recorrente é CWE-269 (gerenciamento impróprio de privilégios), o que sugere fragilidades em controles de acesso que, se exploradas em cadeia, podem elevar o impacto de vulnerabilidades menos severas individualmente. A presença de apenas uma CVE com PoC pública e quatro surgidas nos últimos 90 dias indica um volume recente moderado, mas o monitoramento contínuo permanece necessário dado o perfil de risco da falha mais crítica identificada.

CVE-2017-2741—A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. ThiEPSS 84.6%CVE-2026-0826CRITICALPoly Voice – Possible Remote Control of Certain Poly DevicesEPSS 24.5%CVE-2021-3437CRITICALPotential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denEPSS 15.6%CVE-2018-5924—A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can causEPSS 12.2%CVE-2018-5925—A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can causEPSS 10.9%CVE-2017-2750—Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide EPSS 9.9%CVE-2017-2742—A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploitEPSS 3.5%CVE-2022-38395HIGHHP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. ItEPSS 2.8%CVE-2024-1869HIGHCertain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when usinEPSS 2.3%CVE-2019-16284—A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary cEPSS 2.0%CVE-2023-35175—Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via ServeEPSS 1.8%CVE-2017-2747—HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 forEPSS 1.8%CVE-2023-26295CRITICALPrevious versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.EPSS 1.7%CVE-2024-27460MEDIUMA privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.EPSS 1.7%CVE-2023-26296HIGHPrevious versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.EPSS 1.6%CVE-2023-26298HIGHPrevious versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.EPSS 1.6%CVE-2023-26297HIGHPrevious versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.EPSS 1.6%CVE-2023-27973CRITICALCertain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.EPSS 1.5%CVE-2023-27972CRITICALCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.EPSS 1.5%CVE-2023-1329—A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer OvEPSS 1.5%