Local Code Execution Vulnerability in HP I.R.I.S. OCR Software
CVE-2020-28416

7.8HIGH

Key Information:

Vendor

HP
Status
HP Officejet Printer; HP Pagewide Printer
Vendor
CVE Published:
3 November 2021

What is CVE-2020-28416?

A security vulnerability has been identified in HP's I.R.I.S. Optical Character Recognition software, which is included with HP PageWide and OfficeJet printer software installations. This vulnerability could allow an attacker to execute unauthorized local code, posing a significant risk to users relying on these products for document management and processing.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HP OfficeJet Printer; HP PageWide Printer before 33.1.74

HP OfficeJet Printer; HP PageWide Printer before 35.0.72

HP OfficeJet Printer; HP PageWide Printer before 38.8.1942

References

https://support.hp.com/us-en/document/c07051163
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.