CVE-2023-35176
High
Description
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.
SeverityHigh
CVSS8.8
Exploit probability—
ProductHp Laserjet Pro M453-m454 W1y40a Firmware
PublishedJun 30, 2023
First seenJun 30, 2023
How to fix
Update
- hp laserjet_pro_m453-m454_w1y40a_firmware002_2322c or later
- hp w1a75a_firmware002_2322c or later
- hp w1a76a_firmware002_2322c or later
- hp w1a77a_firmware002_2322c or later
- hp w1a78a_firmware002_2322c or later
- hp w1a79a_firmware002_2322c or later
- hp w1a80a_firmware002_2322c or later
- hp w1a81a_firmware002_2322c or later
- hp w1a82a_firmware002_2322c or later
- hp laserjet_pro_m453-m454_w1y41a_firmware002_2322c or later
- hp laserjet_pro_m453-m454_w1y43a_firmware002_2322c or later
- hp laserjet_pro_m453-m454_w1y44a_firmware002_2322c or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp laserjet_pro_m453-m454_w1y40a_firmware | v < 002_2322c | 002_2322c |
| hp w1a75a_firmware | v < 002_2322c | 002_2322c |
| hp w1a76a_firmware | v < 002_2322c | 002_2322c |
| hp w1a77a_firmware | v < 002_2322c | 002_2322c |
| hp w1a78a_firmware | v < 002_2322c | 002_2322c |
| hp w1a79a_firmware | v < 002_2322c | 002_2322c |
| hp w1a80a_firmware | v < 002_2322c | 002_2322c |
| hp w1a81a_firmware | v < 002_2322c | 002_2322c |
| hp w1a82a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m453-m454_w1y41a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m453-m454_w1y43a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m453-m454_w1y44a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m453-m454_w1y45a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m453-m454_w1y46a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m453-m454_w1y47a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m304-m305_w1a46a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m304-m305_w1a47a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m304-m305_w1a48a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m304-m305_w1a66a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m404-m405_93m22a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m404-m405_w1a51a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m404-m405_w1a52a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m404-m405_w1a53a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m404-m405_w1a56a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m404-m405_w1a57a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m404-m405_w1a58a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m404-m405_w1a59a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m404-m405_w1a60a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_m404-m405_w1a63a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_mfp_m428-m429_f_w1a29a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_mfp_m428-m429_f_w1a30a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_mfp_m428-m429_f_w1a32a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_mfp_m428-m429_f_w1a34a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_mfp_m428-m429_f_w1a35a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_mfp_m428-m429_f_w1a38a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_mfp_m428-m429_w1a28a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_mfp_m428-m429_w1a31a_firmware | v < 002_2322c | 002_2322c |
| hp laserjet_pro_mfp_m428-m429_w1a33a_firmware | v < 002_2322c | 002_2322c |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.