9.8

CVE-2023-27971

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Laserjet Pro M304-m305 W1a46a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M304-m305 W1a46a Version -
Hp ≫ Laserjet Pro M304-m305 W1a47a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M304-m305 W1a47a Version -
Hp ≫ Laserjet Pro M304-m305 W1a48a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M304-m305 W1a48a Version -
Hp ≫ Laserjet Pro M304-m305 W1a66a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M304-m305 W1a66a Version -
Hp ≫ Laserjet Pro M404-m405 93m22a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M404-m405 93m22a Version -
Hp ≫ Laserjet Pro M404-m405 W1a51a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M404-m405 W1a51a Version -
Hp ≫ Laserjet Pro M404-m405 W1a52a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M404-m405 W1a52a Version -
Hp ≫ Laserjet Pro M404-m405 W1a53a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M404-m405 W1a53a Version -
Hp ≫ Laserjet Pro M404-m405 W1a56a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M404-m405 W1a56a Version -
Hp ≫ Laserjet Pro M404-m405 W1a57a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M404-m405 W1a57a Version -
Hp ≫ Laserjet Pro M404-m405 W1a58a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M404-m405 W1a58a Version -
Hp ≫ Laserjet Pro M404-m405 W1a59a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M404-m405 W1a59a Version -
Hp ≫ Laserjet Pro M404-m405 W1a60a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M404-m405 W1a60a Version -
Hp ≫ Laserjet Pro M404-m405 W1a63a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M404-m405 W1a63a Version -
Hp ≫ Laserjet Pro M453-m454 W1y40a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M453-m454 W1y40a Version -
Hp ≫ Laserjet Pro M453-m454 W1y41a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M453-m454 W1y41a Version -
Hp ≫ Laserjet Pro M453-m454 W1y43a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M453-m454 W1y43a Version -
Hp ≫ Laserjet Pro M453-m454 W1y44a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M453-m454 W1y44a Version -
Hp ≫ Laserjet Pro M453-m454 W1y45a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M453-m454 W1y45a Version -
Hp ≫ Laserjet Pro M453-m454 W1y46a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M453-m454 W1y46a Version -
Hp ≫ Laserjet Pro M453-m454 W1y47a Firmware Version < 002_2310a
   Hp ≫ Laserjet Pro M453-m454 W1y47a Version -
Hp ≫ W1a75a Firmware Version < 002_2310a
   Hp ≫ W1a75a Version -
Hp ≫ W1a76a Firmware Version < 002_2310a
   Hp ≫ W1a76a Version -
Hp ≫ W1a77a Firmware Version < 002_2310a
   Hp ≫ W1a77a Version -
Hp ≫ W1a78a Firmware Version < 002_2310a
   Hp ≫ W1a78a Version -
Hp ≫ W1a79a Firmware Version < 002_2310a
   Hp ≫ W1a79a Version -
Hp ≫ W1a80a Firmware Version < 002_2310a
   Hp ≫ W1a80a Version -
Hp ≫ W1a81a Firmware Version < 002_2310a
   Hp ≫ W1a81a Version -
Hp ≫ W1a82a Firmware Version < 002_2310a
   Hp ≫ W1a82a Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.9% 0.569
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://support.hp.com/us-en/document/ish_7919962-7920003-16/hpsbpi03839
Vendor Advisory