CVE-2023-4063

Medium

Description

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request.

SeverityMedium
CVSS5.3
Exploit probability—
ProductHp 1kr42a Firmware
PublishedMar 22, 2024
First seenMar 22, 2024

How to fix

Update
  • hp 1kr42a_firmware002.2349a or later
  • hp 1kr45a_firmware002.2349a or later
  • hp 1kr46a_firmware002.2349a or later
  • hp 1kr48a_firmware002.2349a or later
  • hp 1kr49a_firmware002.2349a or later
  • hp 1kr54a_firmware002.2349a or later
  • hp 1kr55a_firmware002.2349a or later
  • hp 1kr55b_firmware002.2349a or later
  • hp 1kr55d_firmware002.2349a or later
  • hp 1mr66a_firmware002.2349a or later
  • hp 1mr67a_firmware002.2349a or later
  • hp 1mr68a_firmware002.2349a or later

Affected products

ProductAffected versionsFixed in
hp 1kr42a_firmwarev < 002.2349a002.2349a
hp 1kr45a_firmwarev < 002.2349a002.2349a
hp 1kr46a_firmwarev < 002.2349a002.2349a
hp 1kr48a_firmwarev < 002.2349a002.2349a
hp 1kr49a_firmwarev < 002.2349a002.2349a
hp 1kr54a_firmwarev < 002.2349a002.2349a
hp 1kr55a_firmwarev < 002.2349a002.2349a
hp 1kr55b_firmwarev < 002.2349a002.2349a
hp 1kr55d_firmwarev < 002.2349a002.2349a
hp 1mr66a_firmwarev < 002.2349a002.2349a
hp 1mr67a_firmwarev < 002.2349a002.2349a
hp 1mr68a_firmwarev < 002.2349a002.2349a
hp 1mr69a_firmwarev < 002.2349a002.2349a
hp 1mr69c_firmwarev < 002.2349a002.2349a
hp 1mr70a_firmwarev < 002.2349a002.2349a
hp 1mr71a_firmwarev < 002.2349a002.2349a
hp 1mr72a_firmwarev < 002.2349a002.2349a
hp 1mr73a_firmwarev < 002.2349a002.2349a
hp 1mr73d_firmwarev < 002.2349a002.2349a
hp 1mr74a_firmwarev < 002.2349a002.2349a
hp 1mr75a_firmwarev < 002.2349a002.2349a
hp 1mr76a_firmwarev < 002.2349a002.2349a
hp 1mr77a_firmwarev < 002.2349a002.2349a
hp 1mr78a_firmwarev < 002.2349a002.2349a
hp 1mr78b_firmwarev < 002.2349a002.2349a
hp 1mr79a_firmwarev < 002.2349a002.2349a
hp 1mr80d_firmwarev < 002.2349a002.2349a
hp 3uk83a_firmwarev < 002.2349a002.2349a
hp 3uk83b_firmwarev < 002.2349a002.2349a
hp 3uk84a_firmwarev < 002.2349a002.2349a
hp 3uk85d_firmwarev < 002.2349a002.2349a
hp 3uk86b_firmwarev < 002.2349a002.2349a
hp 3uk90d_firmwarev < 002.2349a002.2349a
hp 3uk91b_firmwarev < 002.2349a002.2349a
hp 3uk93d_firmwarev < 002.2349a002.2349a
hp 3uk96d_firmwarev < 002.2349a002.2349a
hp 3uk97d_firmwarev < 002.2349a002.2349a
hp 3uk98d_firmwarev < 002.2349a002.2349a
hp 3uk99d_firmwarev < 002.2349a002.2349a
hp 3ul00d_firmwarev < 002.2349a002.2349a
hp 3ul05b_firmwarev < 002.2349a002.2349a
hp y8m28d_firmwarev < 002.2349a002.2349a

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-4063 · Hp 1kr42a Firmware · Dark Radar