CVE-2019-16240
A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
- CVSS 3.1
- 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- EPSS
- 1.35% probability · 70th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- hp/pagewide pro 577z k9z76a firmware · hp/pagewide pro 577z k9z76b firmware · hp/pagewide pro 577z k9z76d firmware · hp/pagewide pro 577dw d3q21a firmware · hp/pagewide pro 577dw d3q21b firmware · hp/pagewide pro 577dw d3q21c firmware · hp/pagewide pro 577dw d3q21d firmware · hp/pagewide pro 552dw 2dr21d firmware · hp/pagewide pro 552dw d3q17a firmware · hp/pagewide pro 552dw d3q17d firmware · hp/pagewide pro 552dw k9z74a firmware · hp/pagewide pro 552dw k9z74d firmware · hp/pagewide pro 477dw d3q20a firmware · hp/pagewide pro 477dw d3q20b firmware · hp/pagewide pro 477dw d3q20c firmware · hp/pagewide pro 477dw d3q20d firmware · hp/pagewide pro 477dw w2z53b firmware · hp/pagewide pro 477dn d3q19d firmware · hp/pagewide pro 477dn d3q19b firmware · hp/pagewide pro 477dn d3q19a firmware · +24 more
- Source
- cve@mitre.org
References
- https://support.hp.com/us-en/document/c06458150Vendor Advisory
- https://support.hp.com/us-en/document/c06458150Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.