CVE-2019-6337

moderate-risk

Published 2019-11-07

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

Do I need to act?

0.40% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.2/10 Medium

PHYSICAL / LOW complexity

Affected Products (20)

D9L63A Firmware

D9L64A Firmware

T0G70A Firmware

J3P65A Firmware

J3P68A Firmware

J6U57A Firmware

J6U57B Firmware

J9V80A Firmware

J9V80B Firmware

J6U55A Firmware

J6U55D Firmware

J6U51B Firmware

J9V82A Firmware

J9V82D Firmware

J9V78B Firmware

D3Q15A Firmware

D3Q15B Firmware

D3Q15D Firmware

D3Q16A Firmware

D3Q16D Firmware

Affected Vendors

References (2)

Vendor Advisory https://support.hp.com/us-en/document/c06458150

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 2/34 · Minimal

Exposure 24/34 · High