CVE-2019-6327

Published: Jun 17, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an IPP Parser potentially vulnerable to Buffer Overflow.

Affected (10)

Products: Hp: Laserjet Pro M280 M281 T6b80a Firmware, Laserjet Pro M280 M281 T6b83a Firmware, Laserjet Pro M280 M281 T6b81a Firmware, Laserjet Pro M280 M281 T6b82a Firmware, Laserjet Pro Mfp M28 M31 W2g54a Firmware, Laserjet Pro Mfp M28 M31 W2g55a Firmware, Laserjet Pro Mfp M28 M31 Y5s53a Firmware, Laserjet Pro Mfp M28 M31 Y5s55a Firmware, Laserjet Pro Mfp M28 M31 Y5s50a Firmware, Laserjet Pro Mfp M28 M31 Y5s54a Firmware

10 products

Laserjet Pro M280 M281 T6b80a Firmware

Laserjet Pro M280 M281 T6b83a Firmware

Laserjet Pro M280 M281 T6b81a Firmware

Laserjet Pro M280 M281 T6b82a Firmware

Laserjet Pro Mfp M28 M31 W2g54a Firmware

Laserjet Pro Mfp M28 M31 W2g55a Firmware

Laserjet Pro Mfp M28 M31 Y5s53a Firmware

Laserjet Pro Mfp M28 M31 Y5s55a Firmware

Laserjet Pro Mfp M28 M31 Y5s50a Firmware

Laserjet Pro Mfp M28 M31 Y5s54a Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Laserjet Pro M280 M281 T6b80a Firmware	Before 20190419

Running on/with	Platform Versions
Hp Laserjet Pro M280 M281 T6b80a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Laserjet Pro M280 M281 T6b83a Firmware	Before 20190419

Running on/with	Platform Versions
Hp Laserjet Pro M280 M281 T6b83a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Laserjet Pro M280 M281 T6b81a Firmware	Before 20190419

Running on/with	Platform Versions
Hp Laserjet Pro M280 M281 T6b81a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Laserjet Pro M280 M281 T6b82a Firmware	Before 20190419

Running on/with	Platform Versions
Hp Laserjet Pro M280 M281 T6b82a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Laserjet Pro Mfp M28 M31 W2g54a Firmware	Before 20190426

Running on/with	Platform Versions
Hp Laserjet Pro Mfp M28 M31 W2g54a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Laserjet Pro Mfp M28 M31 W2g55a Firmware	Before 20190426

Running on/with	Platform Versions
Hp Laserjet Pro Mfp M28 M31 W2g55a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Laserjet Pro Mfp M28 M31 Y5s53a Firmware	Before 20190426

Running on/with	Platform Versions
Hp Laserjet Pro Mfp M28 M31 Y5s53a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Laserjet Pro Mfp M28 M31 Y5s55a Firmware	Before 20190426

Running on/with	Platform Versions
Hp Laserjet Pro Mfp M28 M31 Y5s55a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Laserjet Pro Mfp M28 M31 Y5s50a Firmware	Before 20190426

Running on/with	Platform Versions
Hp Laserjet Pro Mfp M28 M31 Y5s50a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Laserjet Pro Mfp M28 M31 Y5s54a Firmware	Before 20190426

Running on/with	Platform Versions
Hp Laserjet Pro Mfp M28 M31 Y5s54a	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://support.hp.com/us-en/document/c06356322

Source: hp-security-alert@hp.com

Vendor Advisory

https://support.hp.com/us-en/document/c06356322

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.