VulnerabilityModified
CVE-2021-3438
A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.
HIGH 7.8EPSS 2.93%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.93%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.93% probability · 86th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- hp/color laser 150 4zb94a · hp/color laser 150 4zb95a · hp/color laser mfp 170 4zb96a · hp/color laser mfp 170 4zb97a · hp/color laser mfp 170 6hu08a · hp/color laser mfp 170 6hu09a · hp/laser 100 209u7a · hp/laser 100 4zb79a · hp/laser 100 4zb80a · hp/laser 100 4zb81a · hp/laser 100 5ue14a · hp/laser 408 7uq75a · hp/laser mfp 130 4zb82a · hp/laser mfp 130 4zb83a · hp/laser mfp 130 4zb84a · hp/laser mfp 130 4zb85a · hp/laser mfp 130 4zb86a · hp/laser mfp 130 4zb87a · hp/laser mfp 130 4zb88a · hp/laser mfp 130 4zb89a · +40 more
- Source
- hp-security-alert@hp.com
References
- https://support.hp.com/us-en/document/ish_3900395-3833905-16Vendor Advisory
- https://support.hp.com/us-en/document/ish_3900395-3833905-16Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.