CVEvulnerability
CVE-2018-5921
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.
Affected configurations
• hp f2a70a firmware (< 2405129 000052)
• hp f2a71a firmware (< 2405129 000052)
• hp f2a67a firmware (< 2405129 000052)
• hp b5l26a firmware (< 2405129 000056)
• hp b5l39a firmware (< 2405129 000056)
• hp c2s11a firmware (< 2405129 000055)
• hp c2s11v firmware (< 2405129 000055)
• hp c2s12a firmware (< 2405129 000055)
• hp c2s12v firmware (< 2405129 000055)
• hp l1h45a firmware (< 2405129 000055)
• hp g1w46a firmware (< 2405129 000051)
• hp g1w46v firmware (< 2405129 000051)
• hp g1w47a firmware (< 2405129 000051)
• hp g1w47v firmware (< 2405129 000051)
• hp l3u44a firmware (< 2405129 000051)
• hp l3u44a firmware (< 2405135 000394)
• hp e6b71a firmware (< 2405129 000046)
• hp e6b73a firmware (< 2405129 000046)
• hp k0q14a firmware (< 2405130 000069)
• hp k0q15a firmware (< 2405130 000069)
• hp k0q17a firmware (< 2405130 000069)
• hp k0q18a firmware (< 2405130 000069)
• hp m0p32a firmware (< 2405130 000069)
• hp k0q19a firmware (< 2405130 000069)
• hp k0q20a firmware (< 2405130 000069)
• hp k0q21a firmware (< 2405130 000069)
• hp k0q22a firmware (< 2405130 000069)
• hp m0p33a firmware (< 2405130 000069)
• hp m0p35a firmware (< 2405130 000069)
• hp m0p36a firmware (< 2405130 000069)
• hp m0p39a firmware (< 2405130 000069)
• hp m0p40a firmware (< 2405130 000069)
• hp h0dc9a firmware (< 2405129 000047)
• hp l8z07a firmware (< 2405129 000047)
• hp j7z98a firmware (< 2405130 000068)
• hp j7z99a firmware (< 2405130 000068)
• hp j8a04a firmware (< 2405130 000068)
• hp j8a05a firmware (< 2405130 000068)
• hp j8a06a firmware (< 2405130 000068)
• hp l3u55a firmware (< 2405130 000068)
• hp l3u56a firmware (< 2405130 000068)
• hp l3u57a firmware (< 2405130 000068)
• hp j7z04a firmware (< 2405087 018564)
• hp j7z06a firmware (< 2405087 018564)
• hp cz244a firmware (< 2405129 000059)
• hp a2w77a firmware (< 2405129 000057)
• hp cz245a firmware (< 2405129 000059)
• hp a2w78a firmware (< 2405129 000057)
• hp a2w79a firmware (< 2405129 000057)
• hp d7p73a firmware (< 2405129 000057)
• hp cf116a firmware (< 2405129 000048)
• hp cf117a firmware (< 2405129 000048)
• hp cf118a firmware (< 2405129 000048)
• hp l3u59a firmware (< 2405129 000048)
• hp l3u60a (< 2405129 000048)
• hp f2a76a firmware (< 2405129 000039)
• hp f2a77a firmware (< 2405129 000039)
• hp f2a81a firmware (< 2405129 000039)
• hp f2a78v firmware (< 2405129 000039)
• hp f2a79a firmware (< 2405129 000039)
… and 137 more
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- https://support.hp.com/us-en/document/c05949322 Vendor Advisory
- https://support.hp.com/us-en/document/c05949322 Vendor Advisory