CVE-2023-4063

moderate-risk
Published 2024-03-22

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request.

Do I need to act?

-
0.24% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (20)

1Kr42A Firmware
1Kr45A Firmware
1Kr46A Firmware
1Kr48A Firmware
1Kr49A Firmware
1Kr54A Firmware
1Kr55A Firmware
1Kr55B Firmware
1Kr55D Firmware
1Mr66A Firmware
1Mr67A Firmware
1Mr68A Firmware
1Mr69A Firmware
1Mr69C Firmware
1Mr70A Firmware
1Mr71A Firmware
1Mr72A Firmware
1Mr73A Firmware
1Mr73D Firmware
1Mr74A Firmware

Affected Vendors

Hp

References (2)

Vendor Advisory https://support.hp.com/us-en/document/ish_10321463-10321488-16/hpsbpi03927
Vendor Advisory https://support.hp.com/us-en/document/ish_10321463-10321488-16/hpsbpi03927
46
/ 100
moderate-risk
Severity 21/34 · High
Exploitability 1/34 · Minimal
Exposure 24/34 · High