Auth bypass in HP Designjet T1530 L2y23a
CVE-2021-3965
Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.
Vulnerability class: IDOR (Insecure Direct Object Reference)
EPSS: 0.052 (91.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Hp Designjet_t1530_l2y23a
- Hp Designjet_t1530_l2y23a_firmware — versions mry_07_07_04.1
- Hp Designjet_t1530_l2y24a
- Hp Designjet_t1530_l2y24a_firmware — versions mry_07_07_04.1
- Hp Designjet_t1530_l2y24b
- Hp Designjet_t1530_l2y24b_firmware — versions mry_07_07_04.1
- Hp Designjet_t2530_l2y25a
- Hp Designjet_t2530_l2y25a_firmware — versions mry_07_07_04.1
- Hp Designjet_t2530_l2y26a
- Hp Designjet_t2530_l2y26a_firmware — versions mry_07_07_04.1
Weakness classification (CWE)
References
- hp-security-alert@hp.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-3965?
- CVE-2021-3965 is a high-severity vulnerability in HP Designjet T1530 L2y23a, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 7.5/10. Published 2022-01-14.
- How severe is CVE-2021-3965?
- High severity. CVSS v3 base score is 7.5 out of 10.