8.8

CVE-2023-35176

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ W1a75a Firmware Version < 002_2322c
   Hp ≫ W1a75a Version-
Hp ≫ W1a76a Firmware Version < 002_2322c
   Hp ≫ W1a76a Version-
Hp ≫ W1a77a Firmware Version < 002_2322c
   Hp ≫ W1a77a Version-
Hp ≫ W1a78a Firmware Version < 002_2322c
   Hp ≫ W1a78a Version-
Hp ≫ W1a79a Firmware Version < 002_2322c
   Hp ≫ W1a79a Version-
Hp ≫ W1a80a Firmware Version < 002_2322c
   Hp ≫ W1a80a Version-
Hp ≫ W1a81a Firmware Version < 002_2322c
   Hp ≫ W1a81a Version-
Hp ≫ W1a82a Firmware Version < 002_2322c
   Hp ≫ W1a82a Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.345
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://support.hp.com/us-en/document/ish_8651671-8651697-16/hpsbpi03852
Vendor Advisory