CVE-2019-6318

—

CVSS 3.0

9.8 critical

EPSS

3%p85

Published

Apr 11, 2019 (Apr 11, 2019)

Modified

Jun 17, 2026

Description

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.

Vendors: hp
Products: color laserjet cm4540 mfp firmware, color laserjet enterprise cp5525 firmware, color laserjet enterprise m553 firmware, color laserjet enterprise m552 firmware, color laserjet managed m553 firmware, color laserjet enterprise m651 firmware, color laserjet managed m651 firmware, color laserjet enterprise m652 firmware, color laserjet enterprise m653 firmware, color laserjet enterprise m750 firmware, color laserjet enterprise m855 firmware, color laserjet enterprise mfp m577 firmware
Weakness: CWE-347
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.