Buffer Overflow in HP LaserJet and Samsung Printers
CVE-2021-3438

7.8HIGH

Key Information:

Vendor

HP
Status
Certain HP Laserjet Products And Samsung Product Printers, See Security Bulletin
Vendor
CVE Published:
20 May 2021

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2021-3438?

A buffer overflow issue in the software drivers of select HP LaserJet and Samsung printers has been identified, potentially allowing unauthorized users to escalate privileges within the system.

Affected Version(s)

Certain HP LaserJet products and Samsung product printers, see Security Bulletin Various, see Security Bulletin

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2021-3438
Created by TobiasS1402

CVE-2021-3438
Created by CrackerCat

References

https://support.hp.com/us-en/document/ish_3900395-3833905-16
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.