Information Disclosure Vulnerability in HP LaserJet and PageWide Printers
CVE-2021-39237

4.6MEDIUM

Key Information:

Vendor

HP
Status
HP Laserjet; HP Laserjet Managed; HP Pagewide; HP Pagewide Managed Printers
Vendor
CVE Published:
3 November 2021

What is CVE-2021-39237?

Certain models of HP LaserJet and HP PageWide printers may be susceptible to an information disclosure flaw that could potentially expose sensitive data. This vulnerability affects both LaserJet and PageWide series devices, leading to possible unauthorized access to internal information.

Affected Version(s)

HP LaserJet; HP LaserJet Managed; HP PageWide; HP PageWide Managed printers FS3: before 3.9.8

HP LaserJet; HP LaserJet Managed; HP PageWide; HP PageWide Managed printers FS4: before 4.11.2.1

HP LaserJet; HP LaserJet Managed; HP PageWide; HP PageWide Managed printers FS: before 5.3

References

https://support.hp.com/us-en/document/ish_5000124-5000148-16
x_refsource_MISC

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.