{"id":"CVE-2018-5921","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-5921","generatedAt":"2026-10-28T20:07:33.001Z","title":"A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions.","description":"A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.","published":"2018-10-03T20:29:19.000Z","lastModified":"2026-06-17T02:01:02.000Z","status":"Modified","sourceIdentifier":"hp-security-alert@hp.com","cvss":{"version":"3.0","score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":["CWE-352"],"affected":["hp/f2a70a firmware","hp/f2a71a firmware","hp/f2a67a firmware","hp/b5l26a firmware","hp/b5l39a firmware","hp/c2s11a firmware","hp/c2s11v firmware","hp/c2s12a firmware","hp/c2s12v firmware","hp/l1h45a firmware","hp/g1w46a firmware","hp/g1w46v firmware","hp/g1w47a firmware","hp/g1w47v firmware","hp/l3u44a firmware","hp/e6b71a firmware","hp/e6b73a firmware","hp/k0q14a firmware","hp/k0q15a firmware","hp/k0q17a firmware","hp/k0q18a firmware","hp/m0p32a firmware","hp/k0q19a firmware","hp/k0q20a firmware","hp/k0q21a firmware","hp/k0q22a firmware","hp/m0p33a firmware","hp/m0p35a firmware","hp/m0p36a firmware","hp/m0p39a firmware","hp/m0p40a firmware","hp/h0dc9a firmware","hp/l8z07a firmware","hp/j7z98a firmware","hp/j7z99a firmware","hp/j8a04a firmware","hp/j8a05a firmware","hp/j8a06a firmware","hp/l3u55a firmware","hp/l3u56a firmware","hp/l3u57a firmware","hp/j7z04a firmware","hp/j7z06a firmware","hp/cz244a firmware","hp/a2w77a firmware","hp/cz245a firmware","hp/a2w78a firmware","hp/a2w79a firmware","hp/d7p73a firmware","hp/cf116a firmware","hp/cf117a firmware","hp/cf118a firmware","hp/l3u59a firmware","hp/l3u60a","hp/f2a76a firmware","hp/f2a77a firmware","hp/f2a81a firmware","hp/f2a78v firmware","hp/f2a79a firmware","hp/f2a80a firmware"],"epss":{"score":0.00741,"percentile":0.5443,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.74%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://support.hp.com/us-en/document/c05949322","tags":["Vendor Advisory"],"source":"hp-security-alert@hp.com"},{"url":"https://support.hp.com/us-en/document/c05949322","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-5921","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}