HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.
This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.8, requiring local system access to exploit with relatively low complexity without requiring user interaction requiring only low-level privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 44 products from hp, from hp, from hp and 41 others, organizations running these solutions should prioritize assessment and patching.
First disclosed in 2018, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.
2018-01-23T16:29:01.570
2026-06-17T01:16:47.770
Modified
CVSSv3.0: 7.8 (HIGH)
AV:L/AC:L/Au:N/C:P/I:N/A:N
3.9
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | hp | t790_firmware | ≤ ig_11_00_00.09 | Yes |
| Hardware | hp | t790 | - | No |
| Operating System | hp | t795_firmware | ≤ ig_11_00_00.09 | Yes |
| Hardware | hp | t795 | - | No |
| Operating System | hp | t1300_firmware | ≤ ig_11_00_00.09 | Yes |
| Hardware | hp | t1300 | - | No |
| Operating System | hp | t2300_firmware | ≤ ig_11_00_00.09 | Yes |
| Hardware | hp | t2300 | - | No |
| Operating System | hp | t920_firmware | ≤ mry_04_05_00.4 | Yes |
| Hardware | hp | t920 | - | No |
| Operating System | hp | t930_firmware | ≤ mry_04_05_00.4 | Yes |
| Hardware | hp | t930 | - | No |
| Operating System | hp | t1500_firmware | ≤ mry_04_05_00.4 | Yes |
| Hardware | hp | t1500 | - | No |
| Operating System | hp | t1530_firmware | ≤ mry_04_05_00.4 | Yes |
| Hardware | hp | t1530 | - | No |
| Operating System | hp | t2500_firmware | ≤ mry_04_05_00.4 | Yes |
| Hardware | hp | t2500 | - | No |
| Operating System | hp | t2530_firmware | ≤ mry_04_05_00.4 | Yes |
| Hardware | hp | t2530 | - | No |
| Operating System | hp | t3500_firmware | ≤ aeneas_03_04_00.8 | Yes |
| Hardware | hp | t3500 | - | No |
| Operating System | hp | 110_firmware | ≤ nexus_00_04_53.8 | Yes |
| Hardware | hp | 110 | - | No |
| Operating System | hp | 310_firmware | ≤ nexus_01_12_00.10 | Yes |
| Hardware | hp | 310 | - | No |
| Operating System | hp | 330_firmware | ≤ nexus_01_12_00.10 | Yes |
| Hardware | hp | 330 | - | No |
| Operating System | hp | 360_firmware | ≤ nexus_01_12_00.10 | Yes |
| Hardware | hp | 360 | - | No |
| Operating System | hp | 370_firmware | ≤ nexus_01_12_00.10 | Yes |
| Hardware | hp | 370 | - | No |
| Operating System | hp | 315_firmware | ≤ nexus_03_12_00.14 | Yes |
| Hardware | hp | 315 | - | No |
| Operating System | hp | 335_firmware | ≤ nexus_03_12_00.14 | Yes |
| Hardware | hp | 335 | - | No |
| Operating System | hp | 365_firmware | ≤ nexus_03_12_00.14 | Yes |
| Hardware | hp | 365 | - | No |
| Operating System | hp | 375_firmware | ≤ nexus_03_12_00.14 | Yes |
| Hardware | hp | 375 | - | No |
| Operating System | hp | 560_firmware | ≤ storm_00_05_01.5 | Yes |
| Hardware | hp | 560 | - | No |
| Operating System | hp | 570_firmware | ≤ storm_00_05_01.5 | Yes |
| Hardware | hp | 570 | - | No |
SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For hp's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.