CVE-2019-6326
20190426) may have embedded web server attributes which may be potentially vulnerable to Buffer Overflow.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.68%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have embedded web server attributes which may be potentially vulnerable to Buffer Overflow.
- CVSS 3.0
- 7.2 HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.68% probability · 77th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- hp/t6b80a firmware · hp/t6b83a firmware · hp/t6b81a firmware · hp/t6b82a firmware · hp/w2g54a firmware · hp/w2g55a firmware · hp/y5s53a firmware · hp/y5s55a firmware · hp/y5s50a firmware · hp/y5s54a firmware
- Source
- hp-security-alert@hp.com
EPSS 1.7% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://support.hp.com/us-en/document/c06356322Vendor Advisory
- https://support.hp.com/us-en/document/c06356322Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.