Ransomwarecritical
HP Printer Hijack Bugs Impact 150 Models
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-39238+1 related CVE | Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow | 9.8 group max | 12% | ||
| CVE-2021-3928 | vim is vulnerable to Use of Uninitialized Variable | 7.8 | <1% | PoC |
From the original article
1 min read at infosecurity-magazine.com
Security researchers have discovered two vulnerabilities in multi-function printers (MFPs) which impacted 150 product models. F-Secure security consultants Timo Hirvonen and Alexander Bolshev have written up their findings in a detailed report, Printing Shellz . Specifically, they found a physical access port vulnerability ( CVE-2021-39237 ) and a font parsing bug ( CVE-2021-39238 ) in HP’s MFP M725z device.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.