CVE-2019-16240

Critical

Description

A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

SeverityCritical
CVSS9.1
Exploit probability—
ProductHp Pagewide Pro 577z K9z76a Firmware
PublishedNov 9, 2021
First seenNov 9, 2021

How to fix

Update
  • hp pagewide_pro_577z_k9z76a_firmware001.1937d or later
  • hp pagewide_pro_577z_k9z76b_firmware001.1937d or later
  • hp pagewide_pro_577z_k9z76d_firmware001.1937d or later
  • hp pagewide_pro_577dw_d3q21a_firmware001.1937d or later
  • hp pagewide_pro_577dw_d3q21b_firmware001.1937d or later
  • hp pagewide_pro_577dw_d3q21c_firmware001.1937d or later
  • hp pagewide_pro_577dw_d3q21d_firmware001.1937d or later
  • hp pagewide_pro_552dw_2dr21d_firmware001.1937d or later
  • hp pagewide_pro_552dw_d3q17a_firmware001.1937d or later
  • hp pagewide_pro_552dw_d3q17d_firmware001.1937d or later
  • hp pagewide_pro_552dw_k9z74a_firmware001.1937d or later
  • hp pagewide_pro_552dw_k9z74d_firmware001.1937d or later

Affected products

ProductAffected versionsFixed in
hp pagewide_pro_577z_k9z76a_firmwarev < 001.1937d001.1937d
hp pagewide_pro_577z_k9z76b_firmwarev < 001.1937d001.1937d
hp pagewide_pro_577z_k9z76d_firmwarev < 001.1937d001.1937d
hp pagewide_pro_577dw_d3q21a_firmwarev < 001.1937d001.1937d
hp pagewide_pro_577dw_d3q21b_firmwarev < 001.1937d001.1937d
hp pagewide_pro_577dw_d3q21c_firmwarev < 001.1937d001.1937d
hp pagewide_pro_577dw_d3q21d_firmwarev < 001.1937d001.1937d
hp pagewide_pro_552dw_2dr21d_firmwarev < 001.1937d001.1937d
hp pagewide_pro_552dw_d3q17a_firmwarev < 001.1937d001.1937d
hp pagewide_pro_552dw_d3q17d_firmwarev < 001.1937d001.1937d
hp pagewide_pro_552dw_k9z74a_firmwarev < 001.1937d001.1937d
hp pagewide_pro_552dw_k9z74d_firmwarev < 001.1937d001.1937d
hp pagewide_pro_477dw_d3q20a_firmwarev < 001.1937d001.1937d
hp pagewide_pro_477dw_d3q20b_firmwarev < 001.1937d001.1937d
hp pagewide_pro_477dw_d3q20c_firmwarev < 001.1937d001.1937d
hp pagewide_pro_477dw_d3q20d_firmwarev < 001.1937d001.1937d
hp pagewide_pro_477dw_w2z53b_firmwarev < 001.1937d001.1937d
hp pagewide_pro_477dn_d3q19d_firmwarev < 001.1937d001.1937d
hp pagewide_pro_477dn_d3q19b_firmwarev < 001.1937d001.1937d
hp pagewide_pro_477dn_d3q19a_firmwarev < 001.1937d001.1937d
hp pagewide_pro_452dw_w2z52b_firmwarev < 001.1937d001.1937d
hp pagewide_pro_452dw_d3q16d_firmwarev < 001.1937d001.1937d
hp pagewide_pro_452dw_d3q16a_firmwarev < 001.1937d001.1937d
hp pagewide_pro_452dn_d3q15d_firmwarev < 001.1937d001.1937d
hp pagewide_pro_452dn_d3q15b_firmwarev < 001.1937d001.1937d
hp pagewide_pro_452dn_d3q15a_firmwarev < 001.1937d001.1937d
hp pagewide_managed_p52750dw_j9v78b_firmwarev < 001.1937d001.1937d
hp pagewide_managed_p52750dw_j9v82d_firmwarev < 001.1937d001.1937d
hp pagewide_managed_p52750dw_j9v82a_firmwarev < 001.1937d001.1937d
hp pagewide_managed_p57750dw_j9v78b_firmwarev < 001.1937d001.1937d
hp pagewide_managed_p57750dw_j9v82d_firmwarev < 001.1937d001.1937d
hp pagewide_managed_p57750dw_j9v82a_firmwarev < 001.1937d001.1937d
hp pagewide_managed_p55250dw_j6u51b_firmwarev < 001.1937d001.1937d
hp pagewide_managed_p55250dw_j6u55d_firmwarev < 001.1937d001.1937d
hp pagewide_managed_p55250dw_j6u55a_firmwarev < 001.1937d001.1937d
hp pagewide_377dw_j9v80b_firmwarev < 001.1937d001.1937d
hp pagewide_377dw_j9v80a_firmwarev < 001.1937d001.1937d
hp pagewide_352dw_j6u57b_firmwarev < 001.1937d001.1937d
hp pagewide_352dw_j6u57a_firmwarev < 001.1937d001.1937d
hp officejet_pro_8210_d9l63a_firmwarev < 001.1937c001.1937c
hp officejet_pro_8210_d9l64a_firmwarev < 001.1937c001.1937c
hp officejet_pro_8210_j3p65a_firmwarev < 001.1937c001.1937c
hp officejet_pro_8210_j3p68a_firmwarev < 001.1937c001.1937c
hp officejet_pro_8210_t0g70a_firmwarev < 001.1937c001.1937c

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.