CVEvulnerability

CVE-2018-5921

8.8 HIGH Published 2018-10-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.

Affected configurations

• hp f2a70a firmware (< 2405129 000052) • hp f2a71a firmware (< 2405129 000052) • hp f2a67a firmware (< 2405129 000052) • hp b5l26a firmware (< 2405129 000056) • hp b5l39a firmware (< 2405129 000056) • hp c2s11a firmware (< 2405129 000055) • hp c2s11v firmware (< 2405129 000055) • hp c2s12a firmware (< 2405129 000055) • hp c2s12v firmware (< 2405129 000055) • hp l1h45a firmware (< 2405129 000055) • hp g1w46a firmware (< 2405129 000051) • hp g1w46v firmware (< 2405129 000051) • hp g1w47a firmware (< 2405129 000051) • hp g1w47v firmware (< 2405129 000051) • hp l3u44a firmware (< 2405129 000051) • hp l3u44a firmware (< 2405135 000394) • hp e6b71a firmware (< 2405129 000046) • hp e6b73a firmware (< 2405129 000046) • hp k0q14a firmware (< 2405130 000069) • hp k0q15a firmware (< 2405130 000069) • hp k0q17a firmware (< 2405130 000069) • hp k0q18a firmware (< 2405130 000069) • hp m0p32a firmware (< 2405130 000069) • hp k0q19a firmware (< 2405130 000069) • hp k0q20a firmware (< 2405130 000069) • hp k0q21a firmware (< 2405130 000069) • hp k0q22a firmware (< 2405130 000069) • hp m0p33a firmware (< 2405130 000069) • hp m0p35a firmware (< 2405130 000069) • hp m0p36a firmware (< 2405130 000069) • hp m0p39a firmware (< 2405130 000069) • hp m0p40a firmware (< 2405130 000069) • hp h0dc9a firmware (< 2405129 000047) • hp l8z07a firmware (< 2405129 000047) • hp j7z98a firmware (< 2405130 000068) • hp j7z99a firmware (< 2405130 000068) • hp j8a04a firmware (< 2405130 000068) • hp j8a05a firmware (< 2405130 000068) • hp j8a06a firmware (< 2405130 000068) • hp l3u55a firmware (< 2405130 000068) • hp l3u56a firmware (< 2405130 000068) • hp l3u57a firmware (< 2405130 000068) • hp j7z04a firmware (< 2405087 018564) • hp j7z06a firmware (< 2405087 018564) • hp cz244a firmware (< 2405129 000059) • hp a2w77a firmware (< 2405129 000057) • hp cz245a firmware (< 2405129 000059) • hp a2w78a firmware (< 2405129 000057) • hp a2w79a firmware (< 2405129 000057) • hp d7p73a firmware (< 2405129 000057) • hp cf116a firmware (< 2405129 000048) • hp cf117a firmware (< 2405129 000048) • hp cf118a firmware (< 2405129 000048) • hp l3u59a firmware (< 2405129 000048) • hp l3u60a (< 2405129 000048) • hp f2a76a firmware (< 2405129 000039) • hp f2a77a firmware (< 2405129 000039) • hp f2a81a firmware (< 2405129 000039) • hp f2a78v firmware (< 2405129 000039) • hp f2a79a firmware (< 2405129 000039) … and 137 more

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References