7.8

CVE-2021-3438

A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.

Data is provided by the National Vulnerability Database (NVD)
HpColor Laser 150 4zb94a Version-
HpColor Laser 150 4zb95a Version-
HpLaser 100 209u7a Version-
HpLaser 100 4zb79a Version-
HpLaser 100 4zb80a Version-
HpLaser 100 4zb81a Version-
HpLaser 100 5ue14a Version-
HpLaser 408 7uq75a Version-
HpLaser Mfp 130 4zb82a Version-
HpLaser Mfp 130 4zb83a Version-
HpLaser Mfp 130 4zb84a Version-
HpLaser Mfp 130 4zb85a Version-
HpLaser Mfp 130 4zb86a Version-
HpLaser Mfp 130 4zb87a Version-
HpLaser Mfp 130 4zb88a Version-
HpLaser Mfp 130 4zb89a Version-
HpLaser Mfp 130 4zb90a Version-
HpLaser Mfp 130 4zb91a Version-
HpLaser Mfp 130 4zb92a Version-
HpLaser Mfp 130 4zb93a Version-
HpLaser Mfp 130 5ue15a Version-
HpLaser Mfp 130 6hu10a Version-
HpLaser Mfp 130 6hu11a Version-
HpLaser Mfp 130 6hu12a Version-
HpLaser Mfp 130 9vv52a Version-
HpLaser Mfp 432 7uq76a Version-
SamsungClp-360 Ss062a Version-
SamsungClp-365 Ss066a Version-
SamsungClp-365 Ss067a Version-
SamsungClp-365 Sw139a Version-
SamsungClp-366 Ss068a Version-
SamsungClp-366 Sv600a Version-
SamsungClp-368 Sv601a Version-
SamsungClp-560 Sv611a Version-
SamsungClp-560 Sv612a Version-
SamsungClp-680 Ss075a Version-
SamsungClp-680 Ss076a Version-
SamsungClp-775 Ss078a Version-
SamsungClp-775 Ss079a Version-
SamsungClx-3300 Ss088a Version-
SamsungClx-3300 Sv677a Version-
SamsungClx-3305 Ss093a Version-
SamsungClx-3305 Ss094a Version-
SamsungClx-3305 Ss095a Version-
SamsungClx-3305 Ss096a Version-
SamsungClx-6260 Ss105a Version-
SamsungClx-6260 Ss106a Version-
SamsungClx-6260 Ss107a Version-
SamsungClx-6260 Ss108a Version-
SamsungClx-6260 Sw177a Version-
SamsungMl-3750 Ss138a Version-
SamsungMl-4510 Ss141a Version-
SamsungMl-4512 Ss142a Version-
SamsungMl-5010 Ss145a Version-
SamsungMl-5012 Ss146a Version-
SamsungMl-5015 Ss147a Version-
SamsungMl-5017 Ss148a Version-
SamsungMl-5510 Ss149a Version-
SamsungMl-5510 Ss150a Version-
SamsungMl-5510 Ss151a Version-
SamsungMl-5510 Ss152a Version-
SamsungMl-5510 Sv897a Version-
SamsungMl-5510 Sv898a Version-
SamsungMl-6510 Ss153a Version-
SamsungMl-6510 Ss154a Version-
SamsungMl-6510 Sv899c Version-
SamsungMl-6510 Sv900a Version-
SamsungMl-6510 Sv901a Version-
SamsungScx-3400 Ss155a Version-
SamsungScx-3400 Ss156a Version-
SamsungScx-3400 Sv938a Version-
SamsungScx-3401 Ss157a Version-
SamsungScx-3401 Ss158a Version-
SamsungScx-3401 Sv393a Version-
SamsungScx-3405 Ss159a Version-
SamsungScx-3405 Ss160a Version-
SamsungScx-3405 Ss161a Version-
SamsungScx-3405 Ss162a Version-
SamsungScx-3405 Ss163a Version-
SamsungScx-3405 Sv943a Version-
SamsungScx-3405 Sw313a Version-
SamsungScx-3405 Sw314a Version-
SamsungScx-3406 Ss164a Version-
SamsungScx-3406 Sv298a Version-
SamsungScx-3406 Sv945a Version-
SamsungScx-3406 Sv946a Version-
SamsungScx-3406 Sv947a Version-
SamsungScx-3406 Sw127a Version-
SamsungScx-4021 Ss165a Version-
SamsungScx-4521 Ss167a Version-
SamsungScx-4521 Ss168a Version-
SamsungScx-4521 Sv530a Version-
SamsungScx-4521 Sv966a Version-
SamsungScx-4521 Sv967a Version-
SamsungScx-4521 Sv968a Version-
SamsungScx-4521 Sv969a Version-
SamsungScx-4521 Sw129a Version-
SamsungScx-4650 Sb983a Version-
SamsungScx-4650 Ss171a Version-
SamsungScx-4650 Ss172a Version-
SamsungScx-4655 Ss174a Version-
SamsungScx-4655 Sv988a Version-
SamsungScx-4655 Sv989a Version-
SamsungScx-4833 Ss180a Version-
SamsungScx-4833 Ss181a Version-
SamsungScx-4833 Sw019a Version-
SamsungScx-4835 Sw020a Version-
SamsungScx-4835 Sw021a Version-
SamsungScx-5635 Sw040a Version-
SamsungScx-5635 Sw041a Version-
SamsungScx-5635 Sw093a Version-
SamsungScx-5637 Ss182a Version-
SamsungScx-5637 Sw043a Version-
SamsungScx-5639 St676a Version-
SamsungScx-5737 Ss183a Version-
SamsungScx-5737 Sw045a Version-
SamsungScx-5737 Sw046a Version-
SamsungSf-760 Ss195a Version-
SamsungSf-760 Ss196a Version-
SamsungSf-760 Ss197a Version-
SamsungSf-760 Ss198a Version-
SamsungSf-760 Ss199a Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.68% 0.806
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.