CVE-2019-6318

Critical

Description

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.

SeverityCritical
CVSS9.8
Exploit probability—
ProductHp Laserjet Enterprise 500 Color M551 Firmware
PublishedApr 11, 2019
First seenApr 11, 2019

How to fix

Update
  • hp laserjet_enterprise_500_color_m551_firmware2309010_581427 or later
  • hp color_laserjet_cm4540_mfp_firmware2309010_581401 or later
  • hp color_laserjet_enterprise_cp5525_firmware2309010_581402 or later
  • hp color_laserjet_enterprise_m553_firmware2309010_581409 or later
  • hp color_laserjet_enterprise_m552_firmware2309010_581409, 2407081_00060 or later
  • hp color_laserjet_managed_m553_firmware2309010_581409, 2407081_000601 or later
  • hp color_laserjet_enterprise_m651_firmware2309010_581418, 2407081_000585 or later
  • hp color_laserjet_managed_m651_firmware2309010_581418, 2407081_000585 or later
  • hp color_laserjet_enterprise_m652_firmware2407081_000586 or later
  • hp color_laserjet_enterprise_m653_firmware2407081_000586 or later
  • hp color_laserjet_enterprise_m750_firmware2309010_581423 or later
  • hp color_laserjet_enterprise_m855_firmware2309010_581419, 2407081_000589 or later

Affected products

ProductAffected versionsFixed in
hp laserjet_enterprise_500_color_m551_firmwarev < 2309010_5814272309010_581427
hp color_laserjet_cm4540_mfp_firmwarev < 2309010_5814012309010_581401
hp color_laserjet_enterprise_cp5525_firmwarev < 2309010_5814022309010_581402
hp color_laserjet_enterprise_m553_firmwarev < 2309010_5814092309010_581409
hp color_laserjet_enterprise_m552_firmwarev < 2309010_581409, v < 2407081_000602309010_581409, 2407081_00060
hp color_laserjet_managed_m553_firmwarev < 2309010_581409, v < 2407081_0006012309010_581409, 2407081_000601
hp color_laserjet_enterprise_m651_firmwarev < 2309010_581418, v < 2407081_0005852309010_581418, 2407081_000585
hp color_laserjet_managed_m651_firmwarev < 2309010_581418, v < 2407081_0005852309010_581418, 2407081_000585
hp color_laserjet_enterprise_m652_firmwarev < 2407081_0005862407081_000586
hp color_laserjet_enterprise_m653_firmwarev < 2407081_0005862407081_000586
hp color_laserjet_enterprise_m750_firmwarev < 2309010_5814232309010_581423
hp color_laserjet_enterprise_m855_firmwarev < 2309010_581419, v < 2407081_0005892309010_581419, 2407081_000589
hp color_laserjet_enterprise_mfp_m577_firmwarev < 2309010_581408, v < 2407081_0005712309010_581408, 2407081_000571
hp color_laserjet_enterprise_flow_mfp_m577_firmwarev < 2309010_581408, v < 2407081_0005712309010_581408, 2407081_000571
hp color_laserjet_enterprise_mfp_m680_firmwarev < 2309010_581416, v < 2407081_0005912309010_581416, 2407081_000591
hp color_laserjet_enterprise_flow_mfp_m680_firmwarev < 2309010_581416, v < 2407081_0005912309010_581416, 2407081_000591
hp color_laserjet_enterprise_mfp_m681_firmwarev < 2407081_0005782407081_000578
hp color_laserjet_enterprise_flow_mfp_m681_firmwarev < 2407081_0005782407081_000578
hp color_laserjet_enterprise_mfp_m682_firmwarev < 2407081_0005782407081_000578
hp color_laserjet_enterprise_flow_mfp_m682_firmwarev < 2407081_0005782407081_000578
hp color_laserjet_enterprise_flow_mfp_m880z_firmwarev < 2309010_581433, v < 2407081_0005992309010_581433, 2407081_000599
hp color_laserjet_managed_flow_mfp_m880zm_firmwarev < 2309010_581433, v < 2407081_0005992309010_581433, 2407081_000599
hp color_laserjet_managed_e55040dw_firmwarev < 2407081_0006012407081_000601
hp color_laserjet_managed_e65050_firmwarev < 2407081_0005862407081_000586
hp color_laserjet_managed_e65060_firmwarev < 2407081_0005862407081_000586
hp color_laserjet_managed_flow_mfp_e77822_firmwarev < 2407081_0006442407081_000644
hp color_laserjet_managed_flow_mfp_e77825_firmwarev < 2407081_0006442407081_000644
hp color_laserjet_managed_flow_mfp_e77830_firmwarev < 2407081_0006442407081_000644
hp color_laserjet_managed_mfp_e57540_firmwarev < 2407081_0005712407081_000571
hp color_laserjet_managed_flow_mfp_e57540_firmwarev < 2407081_0005712407081_000571
hp color_laserjet_managed_mfp_e67550_firmwarev < 2407081_0005782407081_000578
hp color_laserjet_managed_mfp_e67560_firmwarev < 2407081_0005782407081_000578
hp color_laserjet_managed_flow_mfp_e6750_firmwarev < 2407081_0005782407081_000578
hp color_laserjet_managed_flow_mfp_e67560_firmwarev < 2407081_0005782407081_000578
hp color_laserjet_managed_mfp_e77822_firmwarev < 2407081_0006442407081_000644
hp color_laserjet_managed_mfp_e77825_firmwarev < 2407081_0006442407081_000644
hp color_laserjet_managed_mfp_e77830_firmwarev < 2407081_0006442407081_000644
hp color_laserjet_managed_mfp_e87640_firmwarev < 2407163_0002242407163_000224
hp color_laserjet_managed_mfp_e87650_firmwarev < 2407163_0002242407163_000224
hp color_laserjet_managed_mfp_e87660_firmwarev < 2407163_0002242407163_000224
hp color_laserjet_managed_flow_mfp_e87640_firmwarev < 2407163_0002242407163_000224
hp color_laserjet_managed_flow_mfp_e87650_firmwarev < 2407163_0002242407163_000224
hp color_laserjet_managed_flow_mfp_e87660_firmwarev < 2407163_0002242407163_000224
hp color_laserjet_managed_mfp_m577_firmwarev < 2309010_581408, v < 2407081_0005712309010_581408, 2407081_000571
hp color_laserjet_managed_flow_mfp_m577_firmwarev < 2309010_581408, v < 2407081_0005712309010_581408, 2407081_000571
hp color_laserjet_managed_mfp_m680_firmwarev < 2309010_581416, v < 2407081_0005912309010_581416, 2407081_000591
hp color_laserjet_managed_flow_mfp_m680_firmwarev < 2309010_581416, v < 2407081_0005912309010_581416, 2407081_000591
hp laserjet_enterprise_500_mfp_m525f_firmwarev < 2309010_581414, v < 2407081_0005942309010_581414, 2407081_000594
hp laserjet_enterprise_flow_mfp_m525_firmwarev < 2309010_581414, v < 2407081_0005942309010_581414, 2407081_000594
hp laserjet_enterprise_500_color_mfp_m575_firmwarev < 2309010_581424, v < 2407081_0005872309010_581424, 2407081_000587
hp laserjet_enterprise_color_flow_mfp_m575_firmwarev < 2309010_581424, v < 2407081_0005872309010_581424, 2407081_000587
hp laserjet_enterprise_600_m601_firmwarev < 2309010_5814252309010_581425
hp laserjet_enterprise_600_m602_firmwarev < 2309010_5814252309010_581425
hp laserjet_enterprise_600_m603_firmwarev < 2309010_5814252309010_581425
hp laserjet_enterprise_700_color_mfp_m775_firmwarev < 2309010_581426, v < 2407081_0005832309010_581426, 2407081_000583
hp color_laserjet_managed_mfp_m775_firmwarev < 2309010_581426, v < 2407081_0005832309010_581426, 2407081_000583
hp laserjet_enterprise_700_m712_firmwarev < 2309010_5814222309010_581422
hp laserjet_enterprise_flow_mfp_m630_firmwarev < 2309010_581400, v < 2407081_0005882309010_581400, 2407081_000588
hp laserjet_managed_flow_mfp_m630_firmwarev < 2309010_581400, v < 2407081_0005882309010_581400, 2407081_000588
hp laserjet_enterprise_flow_mfp_m830_firmwarev < 2309010_581432, v < 2407081_0005692309010_581432, 2407081_000569
hp laserjet_managed_flow_mfp_m830_firmwarev < 2309010_581432, v < 2407081_0005692309010_581432, 2407081_000569
hp laserjet_enterprise_m4555_mfp_firmwarev < 2309010_5814042309010_581404
hp laserjet_enterprise_m506_firmwarev < 2309010_581411, v < 2407081_0005972309010_581411, 2407081_000597
hp laserjet_managed_m506_firmwarev < 2309010_581411, v < 2407081_0005972309010_581411, 2407081_000597
hp laserjet_enterprise_m604_firmwarev < 2309010_581410, v < 2407081_0005932309010_581410, 2407081_000593
hp laserjet_enterprise_m605_firmwarev < 2309010_581410, v < 2407081_0005932309010_581410, 2407081_000593
hp laserjet_managed_m605_firmwarev < 2309010_581410, v < 2407081_0005932309010_581410, 2407081_000593
hp laserjet_enterprise_m606_firmwarev < 2309010_581410, v < 2407081_0005932309010_581410, 2407081_000593
hp laserjet_enterprise_m607_firmwarev < 2407081_0005962407081_000596
hp laserjet_enterprise_m608_firmwarev < 2407081_0005962407081_000596
hp laserjet_enterprise_m609_firmwarev < 2407081_0005962407081_000596
hp laserjet_enterprise_m806_firmwarev < 2309010_581423, v < 2407081_0005742309010_581423, 2407081_000574
hp laserjet_enterprise_mfp_m527_firmwarev < 2309010_581407, v < 2407081_0005752309010_581407, 2407081_000575
hp laserjet_enterprise_flow_mfp_m527z_firmwarev < 2309010_581407, v < 2407081_0005752309010_581407, 2407081_000575
hp laserjet_enterprise_mfp_m630_firmwarev < 2309010_581400, v < 2407081_0005882309010_581400, 2407081_000588
hp laserjet_managed_mfp_m630_firmwarev < 2309010_581400, v < 2407081_0005882309010_581400, 2407081_000588
hp laserjet_enterprise_mfp_m631_firmwarev < 2407081_0005922407081_000592
hp laserjet_enterprise_flow_mfp_m631_firmwarev < 2407081_0005922407081_000592
hp laserjet_enterprise_mfp_m632_firmwarev < 2407081_0005922407081_000592
hp laserjet_enterprise_flow_mfp_m632_firmwarev < 2407081_0005922407081_000592
hp laserjet_enterprise_mfp_m633_firmwarev < 2407081_0005922407081_000592
hp laserjet_enterprise_flow_mfp_m633_firmwarev < 2407081_0005922407081_000592
hp laserjet_enterprise_mfp_m725_firmwarev < 2309010_581420, v < 2407081_0005702309010_581420, 2407081_000570
hp laserjet_managed_mfp_m725_firmwarev < 2309010_581420, v < 2407081_0005702309010_581420, 2407081_000570
hp laserjet_managed_500_mfp_m525_firmwarev < 2309010_581414, v < 2407081_0005942309010_581414, 2407081_000594
hp laserjet_managed_flow_mfp_m525_firmwarev < 2309010_581414, v < 2407081_0005942309010_581414, 2407081_000594
hp laserjet_managed_500_color_mfp_m575_firmwarev < 2309010_581424, v < 2407081_0005872309010_581424, 2407081_000587
hp laserjet_managed_color_flow_mfp_m575_firmwarev < 2309010_581424, v < 2407081_0005872309010_581424, 2407081_000587
hp laserjet_managed_e50045_firmwarev < 2407081_0005972407081_000597
hp laserjet_managed_mfp_e52545_firmwarev < 2407081_0005752407081_000575
hp laserjet_managed_flow_mfp_e52545c_firmwarev < 2407081_0005752407081_000575
hp laserjet_managed_e60055_firmwarev < 2407150_0401942407150_040194
hp laserjet_managed_e60065_firmwarev < 2407150_0401942407150_040194
hp laserjet_managed_e60075_firmwarev < 2407150_0401942407150_040194
hp laserjet_managed_mfp_e62555_firmwarev < 2407081_0005922407081_000592
hp laserjet_managed_mfp_e62565_firmwarev < 2407081_0005922407081_000592
hp laserjet_managed_flow_mfp_e62555_firmwarev < 2407081_0005922407081_000592
hp laserjet_managed_flow_mfp_e62565_firmwarev < 2407081_0005922407081_000592
hp laserjet_managed_flow_mfp_e62575_firmwarev < 2407081_0005922407081_000592
hp laserjet_managed_mfp_e72525_firmwarev < 2407081_0006432407081_000643
hp laserjet_managed_mfp_e72530_firmwarev < 2407081_0006432407081_000643
hp laserjet_managed_mfp_e72535_firmwarev < 2407081_0006432407081_000643
hp laserjet_managed_flow_mfp_e72525_firmwarev < 2407081_0006432407081_000643
hp laserjet_managed_flow_mfp_e72530_firmwarev < 2407081_0006432407081_000643
hp laserjet_managed_flow_mfp_e72535_firmwarev < 2407081_0006432407081_000643
hp laserjet_managed_mfp_e82540_firmwarev < 2407163_0002182407163_000218
hp laserjet_managed_mfp_e82550_firmwarev < 2407163_0002182407163_000218
hp laserjet_managed_mfp_e82560_firmwarev < 2407163_0002182407163_000218
hp laserjet_managed_flow_mfp_e82540_firmwarev < 2407163_0002182407163_000218
hp laserjet_managed_flow_mfp_e82550_firmwarev < 2407163_0002182407163_000218
hp laserjet_managed_flow_mfp_e82560_firmwarev < 2407163_0002182407163_000218
hp laserjet_managed_mfp_m527_firmwarev < 2309010_581407, v < 2407081_0005752309010_581407, 2407081_000575
hp laserjet_managed_flow_mfp_m527z_firmwarev < 2309010_581407, v < 2407081_0005752309010_581407, 2407081_000575
hp officejet_enterprise_color_flow_mfp_x585_firmwarev < 2309010_581406, v < 2407081_0005672309010_581406, 2407081_000567
hp officejet_managed_color_flow_mfp_x585_firmwarev < 2309010_581406, v < 2407081_0005672309010_581406, 2407081_000567
hp officejet_enterprise_color_mfp_x585_firmwarev < 2309010_581406, v < 2407081_0005672309010_581406, 2407081_000567
hp officejet_managed_color_mfp_x585_firmwarev < 2309010_581406, v < 2407081_0005672309010_581406, 2407081_000567
hp officejet_enterprise_color_x555_firmwarev < 2309010_581403, v < 2407081_0005952309010_581403, 2407081_000595
hp pagewide_color_755_firmwarev < 2407081_0005732407081_000573
hp pagewide_color_mfp_774_firmwarev < 2407163_0002402407163_000240
hp pagewide_color_mfp_779_firmwarev < 2407163_0002402407163_000240
hp pagewide_enterprise_color_556_firmwarev < 2309010_5814122309010_581412
hp pagewide_enterprise_color_765_firmwarev < 2407081_0005732407081_000573
hp pagewide_enterprise_color_mfp_586_firmwarev < 2309010_581413, v < 2407081_0005842309010_581413, 2407081_000584
hp pagewide_enterprise_color_flow_mfp_586z_firmwarev < 2309010_581413, v < 2407081_0005842309010_581413, 2407081_000584
hp pagewide_enterprise_color_mfp_780_firmwarev < 2407163_0002112407163_000211
hp pagewide_enterprise_color_flow_mfp_780f_firmwarev < 2407163_0002112407163_000211
hp pagewide_enterprise_color_flow_mpf_785_firmwarev < 2407163_0002112407163_000211
hp pagewide_managed_color_e55650_firmwarev < 2309010_581412, v < 2407081_0005982309010_581412, 2407081_000598
hp pagewide_managed_color_mfp_e58650dn_firmwarev < 2309010_581413, v < 2407081_0005842309010_581413, 2407081_000584
hp pagewide_managed_color_flow_mfp_e58650z_firmwarev < 2309010_581413, v < 2407081_0005842309010_581413, 2407081_000584
hp pagewide_managed_color_e75160_firmwarev < 2407081_0005732407081_000573
hp pagewide_managed_color_p75250_firmwarev < 2407081_0005732407081_000573
hp pagewide_managed_color_mfp_p77440_firmwarev < 2407163_0002402407163_000240
hp pagewide_managed_color_mfp_e77650_firmwarev < 2407163_0002112407163_000211
hp pagewide_managed_color_flow_mfp_e77650_firmwarev < 2407163_0002112407163_000211
hp pagewide_managed_color_flow_mfp_e77660z_firmwarev < 2407163_0002112407163_000211
hp pagewide_managed_color_mfp_p77940_firmwarev < 2407163_0002402407163_000240
hp pagewide_managed_color_mfp_p77950_firmwarev < 2407163_0002402407163_000240
hp pagewide_managed_color_mfp_p77960_firmwarev < 2407163_0002402407163_000240
hp scanjet_enterprise_8500_fn1_document_capture_workstation_firmwarev < 2309010_5814032309010_581403
hp digital_sender_flow_8500_fn2_document_capture_workstation_firmwarev < 2407081_0005902407081_000590
hp scanjet_enterprise_flow_n9120_fn2_document_scanner_firmwarev < 2407081_0005772407081_000577

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.