Vulnerability in Hp Color Laserjet Cm4540 Mfp
CVE-2019-6318
HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.
EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Hp Color_laserjet_cm4540_mfp
- Hp Color_laserjet_cm4540_mfp_firmware
- Hp Color_laserjet_enterprise_cp5525
- Hp Color_laserjet_enterprise_cp5525_firmware
- Hp Color_laserjet_enterprise_flow_mfp_m577
- Hp Color_laserjet_enterprise_flow_mfp_m577_firmware
- Hp Color_laserjet_enterprise_flow_mfp_m680
- Hp Color_laserjet_enterprise_flow_mfp_m680_firmware
- Hp Color_laserjet_enterprise_flow_mfp_m681
- Hp Color_laserjet_enterprise_flow_mfp_m681_firmware
Weakness classification (CWE)
References
- hp-security-alert@hp.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-6318?
- CVE-2019-6318 is a critical-severity vulnerability in Hp Color Laserjet Cm4540 Mfp, classified under Improper Verification of Cryptographic Signature. CVSS score: 9.8/10. Published 2019-04-11.
- How severe is CVE-2019-6318?
- Critical severity. CVSS v3 base score is 9.8 out of 10.