CVE-2023-1526

—

CVSS 3.1

4.6 medium

EPSS

1%p66

Published

Apr 28, 2023 (Apr 28, 2023)

Modified

Jun 17, 2026

Description

Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer.

Vendors: hp
Products: designjet z6 firmware, designjet z6dr firmware, designjet z9 firmware, designjet z9dr firmware, designjet z9\+ pro firmware, pagewide xl 4700, pagewide xl 4500, pagewide xl 4100, pagewide xl 4600, pagewide xl 8000
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.