CVEvulnerability

CVE-2023-26301

9.8 CRITICAL Published 2023-07-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-862

Description

Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.

Affected configurations

• hp color laserjet pro 4201-4203 4ra87f firmware (< 6.12.1.12-202306030312) • hp color laserjet pro 4201-4203 4ra88f firmware (< 6.12.1.12-202306030312) • hp color laserjet pro 4201-4203 4ra89a firmware (< 6.12.1.12-202306030312) • hp color laserjet pro 4201-4203 5hh48a firmware (< 6.12.1.12-202306030312) • hp color laserjet pro 4201-4203 5hh51a firmware (< 6.12.1.12-202306030312) • hp color laserjet pro 4201-4203 5hh52a firmware (< 6.12.1.12-202306030312) • hp color laserjet pro 4201-4203 5hh53a firmware (< 6.12.1.12-202306030312) • hp color laserjet pro 4201-4203 5hh59a firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 4ra80f firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 4ra81f firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 4ra82f firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 4ra83f firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 4ra84f firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 5hh64f firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 5hh65a firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 5hh66a firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 5hh67a firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 5hh72a firmware (< 6.12.1.12-202306030312) • hp color laserjet pro mfp 4301-4303 5hh73a firmware (< 6.12.1.12-202306030312)

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References