CVE-2019-6325

moderate-risk
Published 2019-06-17

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery.

Do I need to act?

-
0.22% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (10)

T6B80A Firmware
T6B83A Firmware
T6B81A Firmware
T6B82A Firmware
W2G54A Firmware
W2G55A Firmware
Y5S53A Firmware
Y5S55A Firmware
Y5S50A Firmware
Y5S54A Firmware

Affected Vendors

Hp

References (2)

Vendor Advisory https://support.hp.com/us-en/document/c06356322
Vendor Advisory https://support.hp.com/us-en/document/c06356322
47
/ 100
moderate-risk
Severity 30/34 · Critical
Exploitability 1/34 · Minimal
Exposure 16/34 · Moderate