CVE-2019-6327

high-risk
Published 2019-06-17

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an IPP Parser potentially vulnerable to Buffer Overflow.

Do I need to act?

-
0.82% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (10)

Laserjet Pro M280-M281 T6B80A Firmware
Laserjet Pro M280-M281 T6B83A Firmware
Laserjet Pro M280-M281 T6B81A Firmware
Laserjet Pro M280-M281 T6B82A Firmware
Laserjet Pro Mfp M28-M31 W2G54A Firmware
Laserjet Pro Mfp M28-M31 W2G55A Firmware
Laserjet Pro Mfp M28-M31 Y5S53A Firmware
Laserjet Pro Mfp M28-M31 Y5S55A Firmware
Laserjet Pro Mfp M28-M31 Y5S50A Firmware
Laserjet Pro Mfp M28-M31 Y5S54A Firmware

Affected Vendors

Hp

References (2)

Vendor Advisory https://support.hp.com/us-en/document/c06356322
Vendor Advisory https://support.hp.com/us-en/document/c06356322
51
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 3/34 · Minimal
Exposure 16/34 · Moderate