CVE-2018-5921

High

Description

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.

SeverityHigh
CVSS8.8
Exploit probability—
ProductHp F2a70a Firmware
PublishedOct 3, 2018
First seenOct 3, 2018

How to fix

Update
  • hp f2a70a_firmware2405129_000052 or later
  • hp f2a71a_firmware2405129_000052 or later
  • hp f2a67a_firmware2405129_000052 or later
  • hp b5l26a_firmware2405129_000056 or later
  • hp b5l39a_firmware2405129_000056 or later
  • hp c2s11a_firmware2405129_000055 or later
  • hp c2s11v_firmware2405129_000055 or later
  • hp c2s12a_firmware2405129_000055 or later
  • hp c2s12v_firmware2405129_000055 or later
  • hp l1h45a_firmware2405129_000055 or later
  • hp g1w46a_firmware2405129_000051 or later
  • hp g1w46v_firmware2405129_000051 or later

Affected products

ProductAffected versionsFixed in
hp f2a70a_firmwarev < 2405129_0000522405129_000052
hp f2a71a_firmwarev < 2405129_0000522405129_000052
hp f2a67a_firmwarev < 2405129_0000522405129_000052
hp b5l26a_firmwarev < 2405129_0000562405129_000056
hp b5l39a_firmwarev < 2405129_0000562405129_000056
hp c2s11a_firmwarev < 2405129_0000552405129_000055
hp c2s11v_firmwarev < 2405129_0000552405129_000055
hp c2s12a_firmwarev < 2405129_0000552405129_000055
hp c2s12v_firmwarev < 2405129_0000552405129_000055
hp l1h45a_firmwarev < 2405129_0000552405129_000055
hp g1w46a_firmwarev < 2405129_0000512405129_000051
hp g1w46v_firmwarev < 2405129_0000512405129_000051
hp g1w47a_firmwarev < 2405129_0000512405129_000051
hp g1w47v_firmwarev < 2405129_0000512405129_000051
hp l3u44a_firmwarev < 2405129_000051, v < 2405135_0003942405129_000051, 2405135_000394
hp e6b71a_firmwarev < 2405129_0000462405129_000046
hp e6b73a_firmwarev < 2405129_0000462405129_000046
hp k0q14a_firmwarev < 2405130_0000692405130_000069
hp k0q15a_firmwarev < 2405130_0000692405130_000069
hp k0q17a_firmwarev < 2405130_0000692405130_000069
hp k0q18a_firmwarev < 2405130_0000692405130_000069
hp m0p32a_firmwarev < 2405130_0000692405130_000069
hp k0q19a_firmwarev < 2405130_0000692405130_000069
hp k0q20a_firmwarev < 2405130_0000692405130_000069
hp k0q21a_firmwarev < 2405130_0000692405130_000069
hp k0q22a_firmwarev < 2405130_0000692405130_000069
hp m0p33a_firmwarev < 2405130_0000692405130_000069
hp m0p35a_firmwarev < 2405130_0000692405130_000069
hp m0p36a_firmwarev < 2405130_0000692405130_000069
hp m0p39a_firmwarev < 2405130_0000692405130_000069
hp m0p40a_firmwarev < 2405130_0000692405130_000069
hp h0dc9a_firmwarev < 2405129_0000472405129_000047
hp l8z07a_firmwarev < 2405129_0000472405129_000047
hp j7z98a_firmwarev < 2405130_0000682405130_000068
hp j7z99a_firmwarev < 2405130_0000682405130_000068
hp j8a04a_firmwarev < 2405130_0000682405130_000068
hp j8a05a_firmwarev < 2405130_0000682405130_000068
hp j8a06a_firmwarev < 2405130_0000682405130_000068
hp l3u55a_firmwarev < 2405130_0000682405130_000068
hp l3u56a_firmwarev < 2405130_0000682405130_000068
hp l3u57a_firmwarev < 2405130_0000682405130_000068
hp j7z04a_firmwarev < 2405087_0185642405087_018564
hp j7z06a_firmwarev < 2405087_0185642405087_018564
hp cz244a_firmwarev < 2405129_0000592405129_000059
hp a2w77a_firmwarev < 2405129_0000572405129_000057
hp cz245a_firmwarev < 2405129_0000592405129_000059
hp a2w78a_firmwarev < 2405129_0000572405129_000057
hp a2w79a_firmwarev < 2405129_0000572405129_000057
hp d7p73a_firmwarev < 2405129_0000572405129_000057
hp cf116a_firmwarev < 2405129_0000482405129_000048
hp cf117a_firmwarev < 2405129_0000482405129_000048
hp cf118a_firmwarev < 2405129_0000482405129_000048
hp l3u59a_firmwarev < 2405129_0000482405129_000048
hp l3u60av < 2405129_0000482405129_000048
hp f2a76a_firmwarev < 2405129_0000392405129_000039
hp f2a77a_firmwarev < 2405129_0000392405129_000039
hp f2a81a_firmwarev < 2405129_0000392405129_000039
hp f2a78v_firmwarev < 2405129_0000392405129_000039
hp f2a79a_firmwarev < 2405129_0000392405129_000039
hp f2a80a_firmwarev < 2405129_0000392405129_000039
hp cd644a_firmwarev < 2405135_0004092405135_000409
hp cd645a_firmwarev < 2405135_0004092405135_000409
hp cd646a_firmwarev < 2405129_0000452405129_000045
hp l3u46a_firmwarev < 2405129_0000452405129_000045
hp l3u45a_firmwarev < 2405129_0000452405129_000045
hp b5l46a_firmwarev < 2405129_0000382405129_000038
hp b5l47a_firmwarev < 2405129_0000382405129_000038
hp b5l48a_firmwarev < 2405129_0000382405129_000038
hp b5l54a_firmwarev < 2405129_0000382405129_000038
hp b5l49a_firmwarev < 2405129_0000382405129_000038
hp b5l50a_firmwarev < 2405129_0000382405129_000038
hp b5l04a_firmwarev < 2405129_0000502405129_000050
hp b5l05a_firmwarev < 2405129_0000502405129_000050
hp b5l06a_firmwarev < 2405129_0000502405129_000050
hp b5l07a_firmwarev < 2405129_0000502405129_000050
hp l3u40a_firmwarev < 2405129_0000502405129_000050
hp l3u41a_firmwarev < 2405129_0000502405129_000050
hp g1w39a_firmwarev < 2405129_0000662405129_000066
hp g1w39v_firmwarev < 2405129_0000662405129_000066
hp g1w40a_firmwarev < 2405129_0000662405129_000066
hp g1w40v_firmwarev < 2405129_0000662405129_000066
hp g1w41a_firmwarev < 2405129_0000662405129_000066
hp g1w41v_firmwarev < 2405129_0000662405129_000066
hp l3u42a_firmwarev < 2405129_0000662405129_000066
hp l3u43a_firmwarev < 2405129_0000662405129_000066
hp b3g85a_firmwarev < 2405129_0000402405129_000040
hp j7x28a_firmwarev < 2405129_0000402405129_000040
hp b3g84a_firmwarev < 2405129_0000402405129_000040
hp p7z47a_firmwarev < 2405129_0000402405129_000040
hp b3g86a_firmwarev < 2405129_0000402405129_000040
hp l3u61a_firmwarev < 2405129_0000402405129_000040
hp l3u62a_firmwarev < 2405129_0000402405129_000040
hp p7z48a_firmwarev < 2405129_0000402405129_000040
hp j8j64a_firmwarev < 2405129_0000412405129_000041
hp j8j63a_firmwarev < 2405129_0000412405129_000041
hp j8j65a_firmwarev < 2405129_0000412405129_000041
hp j8j70a_firmwarev < 2405129_0000412405129_000041
hp j8j71a_firmwarev < 2405129_0000412405129_000041
hp j8j72a_firmwarev < 2405129_0000412405129_000041
hp j8j76a_firmwarev < 2405129_0000412405129_000041
hp j8j78a_firmwarev < 2405129_0000412405129_000041
hp j8j66a_firmwarev < 2405129_0000412405129_000041
hp j8j67a_firmwarev < 2405129_0000412405129_000041
hp j8j73a_firmwarev < 2405129_0000412405129_000041
hp j8j74a_firmwarev < 2405129_0000412405129_000041
hp j8j79a_firmwarev < 2405129_0000412405129_000041
hp j8j80a_firmwarev < 2405129_0000412405129_000041
hp cz248a_firmwarev < 2405129_0000422405129_000042
hp cz249a_firmwarev < 2405129_0000422405129_000042
hp cz250a_firmwarev < 2405129_0000422405129_000042
hp ca251a_firmwarev < 2405129_0000422405129_000042
hp l3u47a_firmwarev < 2405129_0000422405129_000042
hp l3u48a_firmwarev < 2405129_0000422405129_000042
hp j8a10a_firmwarev < 2405129_0000372405129_000037
hp j8a11a_firmwarev < 2405129_0000372405129_000037
hp j8a12a_firmwarev < 2405129_0000372405129_000037
hp j8a13a_firmwarev < 2405129_0000372405129_000037
hp j8a17a_firmwarev < 2405129_0000372405129_000037
hp j8a16a_firmwarev < 2405129_0000372405129_000037
hp l3u67a_firmwarev < 2405129_0000372405129_000037
hp l3u70a_firmwarev < 2405129_0000372405129_000037
hp l3u66a_firmwarev < 2405129_0000372405129_000037
hp l3u69a_firmwarev < 2405129_0000372405129_000037
hp cf066a_firmwarev < 2405129_0000582405129_000058
hp cf067a_firmwarev < 2405129_0000582405129_000058
hp cf068a_firmwarev < 2405129_0000582405129_000058
hp cf069a_firmwarev < 2405129_0000582405129_000058
hp l3u63a_firmwarev < 2405129_0000582405129_000058
hp l3u64a_firmwarev < 2405129_0000582405129_000058
hp cc522a_firmwarev < 2405135_0004052405135_000405
hp cc523a_firmwarev < 2405135_0004052405135_000405
hp cc524a_firmwarev < 2405135_0004052405135_000405
hp l3u49a_firmwarev < 2405135_0004052405135_000405
hp l3u50a_firmwarev < 2405135_0004052405135_000405
hp cf367a_firmwarev < 2405129_0000602405129_000060
hp d7p68a_firmwarev < 2405129_000060, v < 2405129_0000542405129_000060, 2405129_000054
hp l3u65a_firmwarev < 2405129_000060, v < 2405129_0000542405129_000060, 2405129_000054
hp a2w76a_firmwarev < 2405129_0000542405129_000054
hp a2w75a_firmwarev < 2405129_0000542405129_000054
hp d7p70a_firmwarev < 2405129_0000542405129_000054
hp d7p71a_firmwarev < 2405129_0000542405129_000054
hp l3u51a_firmwarev < 2405129_0000542405129_000054
hp l3u52a_firmwarev < 2405129_0000542405129_000054
hp x3a69a_firmwarev < 2405347_0248152405347_024815
hp x3a68a_firmwarev < 2405347_0248152405347_024815
hp z8z19a_firmwarev < 2405347_0248152405347_024815
hp z8z18a_firmwarev < 2405347_0248152405347_024815
hp x3a72a_firmwarev < 2405347_0248152405347_024815
hp x3a71a_firmwarev < 2405347_0248152405347_024815
hp z8z21a_firmwarev < 2405347_0248152405347_024815
hp z8z20a_firmwarev < 2405347_0248152405347_024815
hp x3a79a_firmwarev < 2405347_0248152405347_024815
hp z8z23a_firmwarev < 2405347_0248152405347_024815
hp z8z22a_firmwarev < 2405347_0248152405347_024815
hp x3a75a_firmwarev < 2405347_0248152405347_024815
hp x3a74a_firmwarev < 2405347_0248152405347_024815
hp x3a59a_firmwarev < 2405347_0248212405347_024821
hp x3a60a_firmwarev < 2405347_0248212405347_024821
hp z8z06a_firmwarev < 2405347_0248212405347_024821
hp z8z07a_firmwarev < 2405347_0248212405347_024821
hp x3a62a_firmwarev < 2405347_0248212405347_024821
hp x3a63a_firmwarev < 2405347_0248212405347_024821
hp z8z09a_firmwarev < 2405347_0248212405347_024821
hp z8z08a_firmwarev < 2405347_0248212405347_024821
hp x3a65a_firmwarev < 2405347_0248212405347_024821
hp x3a66a_firmwarev < 2405347_0248212405347_024821
hp z8z11a_firmwarev < 2405347_0248212405347_024821
hp z8z10a_firmwarev < 2405347_0248212405347_024821
hp x3a87a_firmwarev < 2405347_0248142405347_024814
hp x3a86a_firmwarev < 2405347_0248142405347_024814
hp z8z12a_firmwarev < 2405347_0248142405347_024814
hp z8z13a_firmwarev < 2405347_0248142405347_024814
hp x3a90a_firmwarev < 2405347_0248142405347_024814
hp x3a89a_firmwarev < 2405347_0248142405347_024814
hp z8z14a_firmwarev < 2405347_0248142405347_024814
hp z8z15a_firmwarev < 2405347_0248142405347_024814
hp x3a92a_firmwarev < 2405347_0248142405347_024814
hp x3a93a_firmwarev < 2405347_0248142405347_024814
hp z8z16a_firmwarev < 2405347_0248142405347_024814
hp z8z17a_firmwarev < 2405347_0248142405347_024814
hp x3a78a_firmwarev < 2405347_0248202405347_024820
hp x3a77a_firmwarev < 2405347_0248202405347_024820
hp z8z00a_firmwarev < 2405347_0248202405347_024820
hp z8z01a_firmwarev < 2405347_0248202405347_024820
hp x3a81a_firmwarev < 2405347_0248202405347_024820
hp x3a80a_firmwarev < 2405347_0248202405347_024820
hp z8z02a_firmwarev < 2405347_0248202405347_024820
hp z8z03a_firmwarev < 2405347_0248202405347_024820
hp x3a84a_firmwarev < 2405347_0248202405347_024820
hp x3a83a_firmwarev < 2405347_0248202405347_024820
hp z8z05a_firmwarev < 2405347_0248202405347_024820
hp z8z04a_firmwarev < 2405347_0248202405347_024820
hp l2762a_firmwarev < 2405087_0185532405087_018553
hp l2683a_firmwarev < 2405087_0185522405087_018552

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.