CVE-2019-18917

Published: Mar 16, 2020Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout.

Affected (8)

Products: Hp: Envy 5000 M2u85a Firmware, Envy 5000 M2u85b Firmware, Envy 5000 M2u91a Firmware, Envy 5000 M2u94b Firmware, Envy 5000 Z4a54a Firmware, Envy 5000 Z4a74a Firmware, Deskjet Ink Advantage 5000 M2u86a Firmware, Deskjet Ink Advantage 5000 M2u89b Firmware

8 products

Envy 5000 M2u85a Firmware

Envy 5000 M2u85b Firmware

Envy 5000 M2u91a Firmware

Envy 5000 M2u94b Firmware

Envy 5000 Z4a54a Firmware

Envy 5000 Z4a74a Firmware

Deskjet Ink Advantage 5000 M2u86a Firmware

Deskjet Ink Advantage 5000 M2u89b Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 M2u85a Firmware	Before 003.2008a

Running on/with	Platform Versions
Hp Envy 5000 M2u85a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 M2u85b Firmware	Before 003.2008a

Running on/with	Platform Versions
Hp Envy 5000 M2u85b	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 M2u91a Firmware	Before 003.2008a

Running on/with	Platform Versions
Hp Envy 5000 M2u91a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 M2u94b Firmware	Before 003.2008a

Running on/with	Platform Versions
Hp Envy 5000 M2u94b	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 Z4a54a Firmware	Before 003.2008a

Running on/with	Platform Versions
Hp Envy 5000 Z4a54a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 Z4a74a Firmware	Before 003.2008a

Running on/with	Platform Versions
Hp Envy 5000 Z4a74a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet Ink Advantage 5000 M2u86a Firmware	Before 003.2008a

Running on/with	Platform Versions
Hp Deskjet Ink Advantage 5000 M2u86a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet Ink Advantage 5000 M2u89b Firmware	Before 003.2008a

Running on/with	Platform Versions
Hp Deskjet Ink Advantage 5000 M2u89b	All versions

Related CWEs

CWE-307

Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (2)

https://support.hp.com/us-en/document/c06594863

Source: hp-security-alert@hp.com

Vendor Advisory

https://support.hp.com/us-en/document/c06594863

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.