CVEvulnerability
CVE-2019-6318
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-04-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-347
Description
HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.
Affected configurations
• hp color laserjet cm4540 mfp firmware (< 2309010 581401)
• hp color laserjet enterprise cp5525 firmware (< 2309010 581402)
• hp color laserjet enterprise m553 firmware (< 2309010 581409)
• hp color laserjet enterprise m552 firmware (< 2309010 581409)
• hp color laserjet enterprise m552 firmware (< 2407081 00060)
• hp color laserjet managed m553 firmware (< 2309010 581409)
• hp color laserjet managed m553 firmware (< 2407081 000601)
• hp color laserjet enterprise m651 firmware (< 2309010 581418)
• hp color laserjet enterprise m651 firmware (< 2407081 000585)
• hp color laserjet managed m651 firmware (< 2309010 581418)
• hp color laserjet managed m651 firmware (< 2407081 000585)
• hp color laserjet enterprise m652 firmware (< 2407081 000586)
• hp color laserjet enterprise m653 firmware (< 2407081 000586)
• hp color laserjet enterprise m750 firmware (< 2309010 581423)
• hp color laserjet enterprise m855 firmware (< 2309010 581419)
• hp color laserjet enterprise m855 firmware (< 2407081 000589)
• hp color laserjet enterprise mfp m577 firmware (< 2309010 581408)
• hp color laserjet enterprise mfp m577 firmware (< 2407081 000571)
• hp color laserjet enterprise flow mfp m577 firmware (< 2309010 581408)
• hp color laserjet enterprise flow mfp m577 firmware (< 2407081 000571)
• hp color laserjet enterprise mfp m680 firmware (< 2309010 581416)
• hp color laserjet enterprise mfp m680 firmware (< 2407081 000591)
• hp color laserjet enterprise flow mfp m680 firmware (< 2309010 581416)
• hp color laserjet enterprise flow mfp m680 firmware (< 2407081 000591)
• hp color laserjet enterprise mfp m681 firmware (< 2407081 000578)
• hp color laserjet enterprise flow mfp m681 firmware (< 2407081 000578)
• hp color laserjet enterprise mfp m682 firmware (< 2407081 000578)
• hp color laserjet enterprise flow mfp m682 firmware (< 2407081 000578)
• hp color laserjet enterprise flow mfp m880z firmware (< 2309010 581433)
• hp color laserjet enterprise flow mfp m880z firmware (< 2407081 000599)
• hp color laserjet managed flow mfp m880zm firmware (< 2309010 581433)
• hp color laserjet managed flow mfp m880zm firmware (< 2407081 000599)
• hp color laserjet managed e55040dw firmware (< 2407081 000601)
• hp color laserjet managed e65050 firmware (< 2407081 000586)
• hp color laserjet managed e65060 firmware (< 2407081 000586)
• hp color laserjet managed flow mfp e77822 firmware (< 2407081 000644)
• hp color laserjet managed flow mfp e77825 firmware (< 2407081 000644)
• hp color laserjet managed flow mfp e77830 firmware (< 2407081 000644)
• hp color laserjet managed mfp e57540 firmware (< 2407081 000571)
• hp color laserjet managed flow mfp e57540 firmware (< 2407081 000571)
• hp color laserjet managed mfp e67550 firmware (< 2407081 000578)
• hp color laserjet managed mfp e67560 firmware (< 2407081 000578)
• hp color laserjet managed flow mfp e6750 firmware (< 2407081 000578)
• hp color laserjet managed flow mfp e67560 firmware (< 2407081 000578)
• hp color laserjet managed mfp e77822 firmware (< 2407081 000644)
• hp color laserjet managed mfp e77825 firmware (< 2407081 000644)
• hp color laserjet managed mfp e77830 firmware (< 2407081 000644)
• hp color laserjet managed mfp e87640 firmware (< 2407163 000224)
• hp color laserjet managed mfp e87650 firmware (< 2407163 000224)
• hp color laserjet managed mfp e87660 firmware (< 2407163 000224)
• hp color laserjet managed flow mfp e87640 firmware (< 2407163 000224)
• hp color laserjet managed flow mfp e87650 firmware (< 2407163 000224)
• hp color laserjet managed flow mfp e87660 firmware (< 2407163 000224)
• hp color laserjet managed mfp m577 firmware (< 2309010 581408)
• hp color laserjet managed mfp m577 firmware (< 2407081 000571)
• hp color laserjet managed flow mfp m577 firmware (< 2309010 581408)
• hp color laserjet managed flow mfp m577 firmware (< 2407081 000571)
• hp color laserjet managed mfp m680 firmware (< 2309010 581416)
• hp color laserjet managed mfp m680 firmware (< 2407081 000591)
• hp color laserjet managed flow mfp m680 firmware (< 2309010 581416)
… and 137 more
Related
Weakness · CWE (1)
- CWE-347 Improper Verification of Cryptographic Signature weakness
References
- https://support.hp.com/us-en/document/c06265454 Vendor Advisory
- https://support.hp.com/us-en/document/c06265454 Vendor Advisory