Heap Overflow and Remote Code Execution in HP LaserJet Pro Products
CVE-2023-27973

9.8CRITICAL

Key Information:

Vendor

HP
Status
HP Laserjet Pro
Vendor
CVE Published:
28 April 2023

What is CVE-2023-27973?

Certain HP LaserJet Pro print products are potentially susceptible to a heap overflow flaw, which may allow attackers to execute arbitrary code remotely. This vulnerability can significantly compromise the security of the print environment, enabling unauthorized access and manipulation of sensitive information. Users are advised to apply the latest patches provided by HP to mitigate potential risks.

Affected Version(s)

HP LaserJet Pro See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_7920137-7920161...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.