VulnerabilityModified

CVE-2022-28721

Certain HP Print Products are potentially vulnerable to Remote Code Execution.

CRITICAL 9.8EPSS 1.67%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.67%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Certain HP Print Products are potentially vulnerable to Remote Code Execution.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.67% probability · 75th percentile
CISA KEV: Not listed
Affected: hp/m2u86a firmware · hp/m2u86b firmware · hp/m2u86c firmware · hp/m2u87a firmware · hp/m2u87b firmware · hp/m2u88b firmware · hp/m2u89b firmware · hp/m2u76a firmware · hp/m2u77a firmware · hp/5se522a firmware · hp/5sd78a firmware · hp/5sd79a firmware · hp/m2u85b firmware · hp/z4a59a firmware · hp/z4a71a firmware · hp/m2u91b firmware · hp/z4a69a firmware · hp/m2u92b firmware · hp/z4a70a firmware · hp/m2u94b firmware · +40 more
Source: hp-security-alert@hp.com

References

https://support.hp.com/us-en/document/ish_6839789-6839813-16/hpsbpi03810Vendor Advisory
https://support.hp.com/us-en/document/ish_6839789-6839813-16/hpsbpi03810Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.