Remote Code Execution Vulnerability in HP LaserJet Pro Products
CVE-2023-35175

9.8CRITICAL

Key Information:

Vendor

HP
Status
HP Laserjet Pro
Vendor
CVE Published:
30 June 2023

What is CVE-2023-35175?

Certain HP LaserJet Pro models are exposed to risks associated with Server-Side Request Forgery (SSRF), which could potentially allow an attacker to execute arbitrary code remotely or gain elevated privileges. This vulnerability leverages the Web Service Eventing model, emphasizing the need for users to secure their printing environments against unauthorized access and malicious exploitation.

Affected Version(s)

HP LaserJet Pro See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_8651322-8651446...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.