CVE-2023-26301

CRITICAL

9.8

Description

Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published7/21/2023

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

hp:color_laserjet_pro_4201-4203_4ra87fhp:color_laserjet_pro_4201-4203_4ra87f_firmwarehp:color_laserjet_pro_4201-4203_4ra88fhp:color_laserjet_pro_4201-4203_4ra88f_firmwarehp:color_laserjet_pro_4201-4203_4ra89ahp:color_laserjet_pro_4201-4203_4ra89a_firmwarehp:color_laserjet_pro_4201-4203_5hh48ahp:color_laserjet_pro_4201-4203_5hh48a_firmwarehp:color_laserjet_pro_4201-4203_5hh51ahp:color_laserjet_pro_4201-4203_5hh51a_firmwarehp:color_laserjet_pro_4201-4203_5hh52ahp:color_laserjet_pro_4201-4203_5hh52a_firmwarehp:color_laserjet_pro_4201-4203_5hh53ahp:color_laserjet_pro_4201-4203_5hh53a_firmwarehp:color_laserjet_pro_4201-4203_5hh59ahp:color_laserjet_pro_4201-4203_5hh59a_firmwarehp:color_laserjet_pro_mfp_4301-4303_4ra80fhp:color_laserjet_pro_mfp_4301-4303_4ra80f_firmwarehp:color_laserjet_pro_mfp_4301-4303_4ra81fhp:color_laserjet_pro_mfp_4301-4303_4ra81f_firmwarehp:color_laserjet_pro_mfp_4301-4303_4ra82fhp:color_laserjet_pro_mfp_4301-4303_4ra82f_firmwarehp:color_laserjet_pro_mfp_4301-4303_4ra83fhp:color_laserjet_pro_mfp_4301-4303_4ra83f_firmwarehp:color_laserjet_pro_mfp_4301-4303_4ra84fhp:color_laserjet_pro_mfp_4301-4303_4ra84f_firmwarehp:color_laserjet_pro_mfp_4301-4303_5hh64fhp:color_laserjet_pro_mfp_4301-4303_5hh64f_firmwarehp:color_laserjet_pro_mfp_4301-4303_5hh65ahp:color_laserjet_pro_mfp_4301-4303_5hh65a_firmwarehp:color_laserjet_pro_mfp_4301-4303_5hh66ahp:color_laserjet_pro_mfp_4301-4303_5hh66a_firmwarehp:color_laserjet_pro_mfp_4301-4303_5hh67ahp:color_laserjet_pro_mfp_4301-4303_5hh67a_firmwarehp:color_laserjet_pro_mfp_4301-4303_5hh72ahp:color_laserjet_pro_mfp_4301-4303_5hh72a_firmwarehp:color_laserjet_pro_mfp_4301-4303_5hh73ahp:color_laserjet_pro_mfp_4301-4303_5hh73a_firmware

Weaknesses (CWE)

CWE-862

References

https://support.hp.com/us-en/document/ish_8746769-8746795-16/hpsbpi03855(hp-security-alert@hp.com)

https://support.hp.com/us-en/document/ish_8746769-8746795-16/hpsbpi03855(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.