CVE-2019-6332

Published: Jan 9, 2020Modified: Nov 21, 2024

4.8

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Exploitability: 1.7 / Impact: 2.7

Source: NVD

Description

A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting (XSS). Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A; HP DeskJet Ink Advantage 2600 All-in-One Printer series model numbers V1N02A - V1N02B, Y5Z00A - Y5Z04B; HP DeskJet Ink Advantage 5000 All-in-One Printer series model numbers M2U86A - M2U89B; HP DeskJet Ink Advantage 5200 All-in-One Printer series model numbers M2U76A - M2U78B; HP ENVY 5000 All-in-One Printer series model numbers M2U85A - M2U85B, M2U91A - M2U94B, Z4A54A - Z4A74A; HP ENVY Photo 6200 All-in-One Printer series model numbers K7G18A-K7G26B, K7S21B, Y0K13D - Y0K15A; HP ENVY Photo 7100 All-in-One Printer series model numbers 3XD89A, K7G93A-K7G99A, Z3M37A - Z3M52A; HP ENVY Photo 7800 All-in-One Printer series model numbers K7R96A, K7S00A - K7S10D, Y0G42D - Y0G52B; HP Ink Tank Wireless 410 series model numbers Z4B53A - Z4B55A, Z6Z95A - Z6Z99A, 4DX94A - 4DX95A, 4YF79A, Z7A01A; HP OfficeJet 5200 All-in-One Printer series model numbers M2U75A, M2U81A-M2U84B, Z4B12A - Z4B14A, Z4B27A - Z4B29A; HP Smart Tank Wireless 450 series model numbers Z4B56A, Z6Z96A - Z6Z98A.

Affected (52)

Products: Hp: Deskjet 2600 4uj28b Firmware, Deskjet 2600 V1n01a Firmware, Deskjet 2600 V1n08a Firmware, Deskjet 2600 Y5h60a Firmware, Deskjet 2600 Y5h80a Firmware, Deskjet Ink Advantage 2600 V1n02a Firmware, Deskjet Ink Advantage 2600 V1n02b Firmware, Deskjet Ink Advantage 2600 Y5z00a Firmware, Deskjet Ink Advantage 2600 Y5z04b Firmware, Deskjet Ink Advantage 5000 M2u86a Firmware, Deskjet Ink Advantage 5000 M2u89b Firmware, Deskjet Ink Advantage 5200 M2u76a Firmware, Deskjet Ink Advantage 5200 M2u78b Firmware, Envy 5000 M2u85a Firmware, Envy 5000 M2u85b Firmware, Envy 5000 M2u91a Firmware, Envy 5000 M2u94b Firmware, Envy 5000 Z4a54a Firmware, Envy 5000 Z4a74a Firmware, Envy Photo 6200 K7g18a Firmware, Envy Photo 6200 K7g26b Firmware, Envy Photo 6200 K7s21b Firmware, Envy Photo 6200 Y0k13d Firmware, Envy Photo 6200 Y0k15a Firmware, Envy Photo 7100 3xd89a Firmware, Envy Photo 7100 K7g93a Firmware, Envy Photo 7100 K7g99a Firmware, Envy Photo 7100 Z3m37a Firmware, Envy Photo 7100 Z3m52a Firmware, Envy Photo 7800 K7r96a Firmware, Envy Photo 7800 K7s00a Firmware, Envy Photo 7800 K7s10d Firmware, Envy Photo 7800 Y0g42d Firmware, Envy Photo 7800 Y0g52b Firmware, Ink Tank Wireless 410 Z4b53a Firmware, Ink Tank Wireless 410 Z4b55a Firmware, Ink Tank Wireless 410 Z6z95a Firmware, Ink Tank Wireless 410 Z6z99a Firmware, Ink Tank Wireless 410 4dx94a Firmware, Ink Tank Wireless 410 4dx95a Firmware, Ink Tank Wireless 410 4yf79a Firmware, Ink Tank Wireless 410 Z7a01a Firmware, Officejet 5200 M2u75a Firmware, Officejet 5200 M2u81a Firmware, Officejet 5200 M2u84b Firmware, Officejet 5200 Z4b12a Firmware, Officejet 5200 Z4b14a Firmware, Officejet 5200 Z4b27a Firmware, Officejet 5200 Z4b29a Firmware, Smart Tank Wireless 450 Z4b56a Firmware, Smart Tank Wireless 450 Z6z96a Firmware, Smart Tank Wireless 450 Z6z98a Firmware

52 products

Deskjet 2600 4uj28b Firmware

Deskjet 2600 V1n01a Firmware

Deskjet 2600 V1n08a Firmware

Deskjet 2600 Y5h60a Firmware

Deskjet 2600 Y5h80a Firmware

Deskjet Ink Advantage 2600 V1n02a Firmware

Deskjet Ink Advantage 2600 V1n02b Firmware

Deskjet Ink Advantage 2600 Y5z00a Firmware

Deskjet Ink Advantage 2600 Y5z04b Firmware

Deskjet Ink Advantage 5000 M2u86a Firmware

Deskjet Ink Advantage 5000 M2u89b Firmware

Deskjet Ink Advantage 5200 M2u76a Firmware

Deskjet Ink Advantage 5200 M2u78b Firmware

Envy 5000 M2u85a Firmware

Envy 5000 M2u85b Firmware

Envy 5000 M2u91a Firmware

Envy 5000 M2u94b Firmware

Envy 5000 Z4a54a Firmware

Envy 5000 Z4a74a Firmware

Envy Photo 6200 K7g18a Firmware

Envy Photo 6200 K7g26b Firmware

Envy Photo 6200 K7s21b Firmware

Envy Photo 6200 Y0k13d Firmware

Envy Photo 6200 Y0k15a Firmware

Envy Photo 7100 3xd89a Firmware

Envy Photo 7100 K7g93a Firmware

Envy Photo 7100 K7g99a Firmware

Envy Photo 7100 Z3m37a Firmware

Envy Photo 7100 Z3m52a Firmware

Envy Photo 7800 K7r96a Firmware

Envy Photo 7800 K7s00a Firmware

Envy Photo 7800 K7s10d Firmware

Envy Photo 7800 Y0g42d Firmware

Envy Photo 7800 Y0g52b Firmware

Ink Tank Wireless 410 Z4b53a Firmware

Ink Tank Wireless 410 Z4b55a Firmware

Ink Tank Wireless 410 Z6z95a Firmware

Ink Tank Wireless 410 Z6z99a Firmware

Ink Tank Wireless 410 4dx94a Firmware

Ink Tank Wireless 410 4dx95a Firmware

Ink Tank Wireless 410 4yf79a Firmware

Ink Tank Wireless 410 Z7a01a Firmware

Officejet 5200 M2u75a Firmware

Officejet 5200 M2u81a Firmware

Officejet 5200 M2u84b Firmware

Officejet 5200 Z4b12a Firmware

Officejet 5200 Z4b14a Firmware

Officejet 5200 Z4b27a Firmware

Officejet 5200 Z4b29a Firmware

Smart Tank Wireless 450 Z4b56a Firmware

Smart Tank Wireless 450 Z6z96a Firmware

Smart Tank Wireless 450 Z6z98a Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet 2600 4uj28b Firmware	Before 1923

Running on/with	Platform Versions
Hp Deskjet 2600 4uj28b	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet 2600 V1n01a Firmware	Before 1923

Running on/with	Platform Versions
Hp Deskjet 2600 V1n01a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet 2600 V1n08a Firmware	Before 1923

Running on/with	Platform Versions
Hp Deskjet 2600 V1n08a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet 2600 Y5h60a Firmware	Before 1923

Running on/with	Platform Versions
Hp Deskjet 2600 Y5h60a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet 2600 Y5h80a Firmware	Before 1923

Running on/with	Platform Versions
Hp Deskjet 2600 Y5h80a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet Ink Advantage 2600 V1n02a Firmware	Before 1923

Running on/with	Platform Versions
Hp Deskjet Ink Advantage 2600 V1n02a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet Ink Advantage 2600 V1n02b Firmware	Before 1923

Running on/with	Platform Versions
Hp Deskjet Ink Advantage 2600 V1n02b	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet Ink Advantage 2600 Y5z00a Firmware	Before 1923

Running on/with	Platform Versions
Hp Deskjet Ink Advantage 2600 Y5z00a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet Ink Advantage 2600 Y5z04b Firmware	Up to 1923

Running on/with	Platform Versions
Hp Deskjet Ink Advantage 2600 Y5z04b	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet Ink Advantage 5000 M2u86a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Deskjet Ink Advantage 5000 M2u86a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet Ink Advantage 5000 M2u89b Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Deskjet Ink Advantage 5000 M2u89b	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet Ink Advantage 5200 M2u76a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Deskjet Ink Advantage 5200 M2u76a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Deskjet Ink Advantage 5200 M2u78b Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Deskjet Ink Advantage 5200 M2u78b	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 M2u85a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy 5000 M2u85a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 M2u85b Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy 5000 M2u85b	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 M2u91a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy 5000 M2u91a	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 M2u94b Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy 5000 M2u94b	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 Z4a54a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy 5000 Z4a54a	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy 5000 Z4a74a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy 5000 Z4a74a	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 6200 K7g18a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 6200 K7g18a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 6200 K7g26b Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 6200 K7g26b	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 6200 K7s21b Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 6200 K7s21b	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 6200 Y0k13d Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 6200 Y0k13d	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 6200 Y0k15a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 6200 Y0k15a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 7100 3xd89a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 7100 3xd89a	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 7100 K7g93a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 7100 K7g93a	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 7100 K7g99a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 7100 K7g99a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 7100 Z3m37a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 7100 Z3m37a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 7100 Z3m52a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 7100 Z3m52a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 7800 K7r96a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 7800 K7r96a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 7800 K7s00a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 7800 K7s00a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 7800 K7s10d Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 7800 K7s10d	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 7800 Y0g42d Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 7800 Y0g42d	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Envy Photo 7800 Y0g52b Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Envy Photo 7800 Y0g52b	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ink Tank Wireless 410 Z4b53a Firmware	Before 1924

Running on/with	Platform Versions
Hp Ink Tank Wireless 410 Z4b53a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ink Tank Wireless 410 Z4b55a Firmware	Before 1924

Running on/with	Platform Versions
Hp Ink Tank Wireless 410 Z4b55a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ink Tank Wireless 410 Z6z95a Firmware	Before 1924

Running on/with	Platform Versions
Hp Ink Tank Wireless 410 Z6z95a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ink Tank Wireless 410 Z6z99a Firmware	Before 1924

Running on/with	Platform Versions
Hp Ink Tank Wireless 410 Z6z99a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ink Tank Wireless 410 4dx94a Firmware	Before 1924

Running on/with	Platform Versions
Hp Ink Tank Wireless 410 4dx94a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ink Tank Wireless 410 4dx95a Firmware	Before 1924

Running on/with	Platform Versions
Hp Ink Tank Wireless 410 4dx95a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ink Tank Wireless 410 4yf79a Firmware	Before 1924

Running on/with	Platform Versions
Hp Ink Tank Wireless 410 4yf79a	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Ink Tank Wireless 410 Z7a01a Firmware	Before 1924

Running on/with	Platform Versions
Hp Ink Tank Wireless 410 Z7a01a	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Officejet 5200 M2u75a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Officejet 5200 M2u75a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Officejet 5200 M2u81a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Officejet 5200 M2u81a	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Officejet 5200 M2u84b Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Officejet 5200 M2u84b	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Officejet 5200 Z4b12a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Officejet 5200 Z4b12a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Officejet 5200 Z4b14a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Officejet 5200 Z4b14a	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Officejet 5200 Z4b27a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Officejet 5200 Z4b27a	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Officejet 5200 Z4b29a Firmware	Before 003.1925a

Running on/with	Platform Versions
Hp Officejet 5200 Z4b29a	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Smart Tank Wireless 450 Z4b56a Firmware	Before 1924

Running on/with	Platform Versions
Hp Smart Tank Wireless 450 Z4b56a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Smart Tank Wireless 450 Z6z96a Firmware	Before 1924

Running on/with	Platform Versions
Hp Smart Tank Wireless 450 Z6z96a	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Smart Tank Wireless 450 Z6z98a Firmware	Before 1924

Running on/with	Platform Versions
Hp Smart Tank Wireless 450 Z6z98a	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://support.hp.com/in-en/document/c06428029

Source: hp-security-alert@hp.com

Vendor Advisory

https://support.hp.com/in-en/document/c06428029

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.