Buffer Overflow Vulnerability in HP Enterprise LaserJet and PageWide Products
CVE-2021-39238

9.8CRITICAL

Key Information:

Vendor

HP
Status
HP Enterprise Laserjet; HP Laserjet Managed; HP Enterprise Pagewide; HP Pagewide Managed Printers
Vendor
CVE Published:
3 November 2021

What is CVE-2021-39238?

Certain models of HP Enterprise LaserJet and PageWide printers may be susceptible to a buffer overflow vulnerability. This issue can potentially allow an attacker to exploit system memory, leading to unauthorized access or execution of arbitrary code. Affected users should apply the recommended security updates to mitigate the risk. For detailed guidance and further information, please refer to HP's support documentation.

Affected Version(s)

HP Enterprise LaserJet; HP LaserJet Managed; HP Enterprise PageWide; HP PageWide Managed printers FS3: before 3.9.8

HP Enterprise LaserJet; HP LaserJet Managed; HP Enterprise PageWide; HP PageWide Managed printers FS4: before 4.11.2.1

HP Enterprise LaserJet; HP LaserJet Managed; HP Enterprise PageWide; HP PageWide Managed printers FS: before 5.3

References

https://support.hp.com/us-en/document/ish_5000383-5000409-16
x_refsource_MISC

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.