CVE-2021-3965

Published: Jan 14, 2022Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.

Affected (27)

27 products

Designjet T920 Cr355a Firmware

Designjet T920 Cr355b Firmware

Designjet T920 Cr354a Firmware

Designjet T930 L2y22a Firmware

Designjet T930 L2y22b Firmware

Designjet T930 L2y21a Firmware

Designjet T930 L2y21b Firmware

Designjet T1530 L2y24a Firmware

Designjet T1530 L2y24b Firmware

Designjet T1530 L2y23a Firmware

Designjet T2530 L2y25a Firmware

Designjet T2530 L2y26a Firmware

Designjet T2530 L2y26b Firmware

Designjet T3500 B9e24a Firmware

Designjet T3500 B9e24b Firmware

Designjet T3500 B9e25a Firmware

Designjet Z6800 F2s72a Firmware

Designjet Z6800 F2s72ar Firmware

Designjet Z6800 F2s72b Firmware

Designjet Z6600 F2s71a Firmware

Designjet Z6600 F2s71ar Firmware

Designjet Z6810 2qu12a Firmware

Designjet Z6810 2qu12b Firmware

Designjet Z6810 2qu14a Firmware

Designjet Z6810 2qu14b Firmware

Designjet Z6610 2qu13b Firmware

Designjet Z6610 2qu13a Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T920 Cr355a Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T920 Cr355a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T920 Cr355b Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T920 Cr355b	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T920 Cr354a Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T920 Cr354a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T930 L2y22a Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T930 L2y22a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T930 L2y22b Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T930 L2y22b	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T930 L2y21a Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T930 L2y21a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T930 L2y21b Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T930 L2y21b	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T1530 L2y24a Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T1530 L2y24a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T1530 L2y24b Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T1530 L2y24b	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T1530 L2y23a Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T1530 L2y23a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T2530 L2y25a Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T2530 L2y25a	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T2530 L2y26a Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T2530 L2y26a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T2530 L2y26b Firmware	Version mry_07_07_04.1

Running on/with	Platform Versions
Hp Designjet T2530 L2y26b	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T3500 B9e24a Firmware	Version aeneas_04_09_06.1

Running on/with	Platform Versions
Hp Designjet T3500 B9e24a	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T3500 B9e24b Firmware	Version aeneas_04_09_06.1

Running on/with	Platform Versions
Hp Designjet T3500 B9e24b	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet T3500 B9e25a Firmware	Version aeneas_04_09_06.1

Running on/with	Platform Versions
Hp Designjet T3500 B9e25a	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6800 F2s72a Firmware	Version ptr8_03_07_06.1

Running on/with	Platform Versions
Hp Designjet Z6800 F2s72a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6800 F2s72ar Firmware	Version ptr8_03_07_06.1

Running on/with	Platform Versions
Hp Designjet Z6800 F2s72ar	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6800 F2s72b Firmware	Version ptr8_03_07_06.1

Running on/with	Platform Versions
Hp Designjet Z6800 F2s72b	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6600 F2s71a Firmware	Version ptr6_03_07_06.1

Running on/with	Platform Versions
Hp Designjet Z6600 F2s71a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6600 F2s71ar Firmware	Version ptr6_03_07_06.1

Running on/with	Platform Versions
Hp Designjet Z6600 F2s71ar	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6810 2qu12a Firmware	Version px8_06_05_02.1

Running on/with	Platform Versions
Hp Designjet Z6810 2qu12a	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6810 2qu12b Firmware	Version px8_06_05_02.1

Running on/with	Platform Versions
Hp Designjet Z6810 2qu12b	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6810 2qu14a Firmware	Version px8_06_05_02.1

Running on/with	Platform Versions
Hp Designjet Z6810 2qu14a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6810 2qu14b Firmware	Version px8_06_05_02.1

Running on/with	Platform Versions
Hp Designjet Z6810 2qu14b	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6610 2qu13b Firmware	Version px6_06_05_02.1

Running on/with	Platform Versions
Hp Designjet Z6610 2qu13b	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Designjet Z6610 2qu13a Firmware	Version px6_06_05_02.1

Running on/with	Platform Versions
Hp Designjet Z6610 2qu13a	All versions

Related CWEs

CWE-639

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (2)

https://support.hp.com/us-en/document/ish_5268198-5268230-16

Source: hp-security-alert@hp.com

Vendor Advisory

https://support.hp.com/us-en/document/ish_5268198-5268230-16

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.