7.5

CVE-2021-3965

Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Designjet T920 Cr355a Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T920 Cr355a Version -
Hp ≫ Designjet T920 Cr355b Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T920 Cr355b Version -
Hp ≫ Designjet T920 Cr354a Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T920 Cr354a Version -
Hp ≫ Designjet T930 L2y22a Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T930 L2y22a Version -
Hp ≫ Designjet T930 L2y22b Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T930 L2y22b Version -
Hp ≫ Designjet T930 L2y21a Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T930 L2y21a Version -
Hp ≫ Designjet T930 L2y21b Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T930 L2y21b Version -
Hp ≫ Designjet T1530 L2y24a Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T1530 L2y24a Version -
Hp ≫ Designjet T1530 L2y24b Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T1530 L2y24b Version -
Hp ≫ Designjet T1530 L2y23a Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T1530 L2y23a Version -
Hp ≫ Designjet T2530 L2y25a Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T2530 L2y25a Version -
Hp ≫ Designjet T2530 L2y26a Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T2530 L2y26a Version -
Hp ≫ Designjet T2530 L2y26b Firmware Version mry_07_07_04.1
   Hp ≫ Designjet T2530 L2y26b Version -
Hp ≫ Designjet T3500 B9e24a Firmware Version aeneas_04_09_06.1
   Hp ≫ Designjet T3500 B9e24a Version -
Hp ≫ Designjet T3500 B9e24b Firmware Version aeneas_04_09_06.1
   Hp ≫ Designjet T3500 B9e24b Version -
Hp ≫ Designjet T3500 B9e25a Firmware Version aeneas_04_09_06.1
   Hp ≫ Designjet T3500 B9e25a Version -
Hp ≫ Designjet Z6800 F2s72a Firmware Version ptr8_03_07_06.1
   Hp ≫ Designjet Z6800 F2s72a Version -
Hp ≫ Designjet Z6800 F2s72ar Firmware Version ptr8_03_07_06.1
   Hp ≫ Designjet Z6800 F2s72ar Version -
Hp ≫ Designjet Z6800 F2s72b Firmware Version ptr8_03_07_06.1
   Hp ≫ Designjet Z6800 F2s72b Version -
Hp ≫ Designjet Z6600 F2s71a Firmware Version ptr6_03_07_06.1
   Hp ≫ Designjet Z6600 F2s71a Version -
Hp ≫ Designjet Z6600 F2s71ar Firmware Version ptr6_03_07_06.1
   Hp ≫ Designjet Z6600 F2s71ar Version -
Hp ≫ Designjet Z6810 2qu12a Firmware Version px8_06_05_02.1
   Hp ≫ Designjet Z6810 2qu12a Version -
Hp ≫ Designjet Z6810 2qu12b Firmware Version px8_06_05_02.1
   Hp ≫ Designjet Z6810 2qu12b Version -
Hp ≫ Designjet Z6810 2qu14a Firmware Version px8_06_05_02.1
   Hp ≫ Designjet Z6810 2qu14a Version -
Hp ≫ Designjet Z6810 2qu14b Firmware Version px8_06_05_02.1
   Hp ≫ Designjet Z6810 2qu14b Version -
Hp ≫ Designjet Z6610 2qu13b Firmware Version px6_06_05_02.1
   Hp ≫ Designjet Z6610 2qu13b Version -
Hp ≫ Designjet Z6610 2qu13a Firmware Version px6_06_05_02.1
   Hp ≫ Designjet Z6610 2qu13a Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.24% 0.915
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-639 Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

https://support.hp.com/us-en/document/ish_5268198-5268230-16
Vendor Advisory