Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-5921


A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.


Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 8.8, indicating it can be exploited remotely over the network with relatively low complexity though user interaction is required and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 387 products from hp, from hp, from hp and 384 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2018, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.


Published

2018-10-03T20:29:18.520

Last Modified

2024-11-21T04:09:42.497

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-352

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System hp f2a70a_firmware < 2405129_000052 Yes
Hardware hp f2a70a - No
Operating System hp f2a71a_firmware < 2405129_000052 Yes
Hardware hp f2a71a - No
Operating System hp f2a67a_firmware < 2405129_000052 Yes
Hardware hp f2a67a - No
Operating System hp b5l26a_firmware < 2405129_000056 Yes
Hardware hp b5l26a - No
Operating System hp b5l39a_firmware < 2405129_000056 Yes
Hardware hp b5l39a - No
Operating System hp c2s11a_firmware < 2405129_000055 Yes
Hardware hp c2s11a - No
Operating System hp c2s11v_firmware < 2405129_000055 Yes
Hardware hp c2s11v - No
Operating System hp c2s12a_firmware < 2405129_000055 Yes
Hardware hp c2s12a - No
Operating System hp c2s12v_firmware < 2405129_000055 Yes
Hardware hp c2s12v - No
Operating System hp l1h45a_firmware < 2405129_000055 Yes
Hardware hp l1h45a - No
Operating System hp g1w46a_firmware < 2405129_000051 Yes
Hardware hp g1w46a - No
Operating System hp g1w46v_firmware < 2405129_000051 Yes
Hardware hp g1w46v - No
Operating System hp g1w47a_firmware < 2405129_000051 Yes
Hardware hp g1w47a - No
Operating System hp g1w47v_firmware < 2405129_000051 Yes
Hardware hp g1w47v - No
Operating System hp l3u44a_firmware < 2405129_000051 Yes
Hardware hp l3u44a - No
Operating System hp l3u44a_firmware < 2405135_000394 Yes
Hardware hp l3u44a - No
Operating System hp e6b71a_firmware < 2405129_000046 Yes
Hardware hp e6b71a - No
Operating System hp e6b73a_firmware < 2405129_000046 Yes
Hardware hp e6b73a - No
Operating System hp k0q14a_firmware < 2405130_000069 Yes
Hardware hp k0q14a - No
Operating System hp k0q15a_firmware < 2405130_000069 Yes
Hardware hp k0q15a - No
Operating System hp k0q17a_firmware < 2405130_000069 Yes
Hardware hp k0q17a - No
Operating System hp k0q18a_firmware < 2405130_000069 Yes
Hardware hp k0q18a - No
Operating System hp m0p32a_firmware < 2405130_000069 Yes
Hardware hp m0p32a - No
Operating System hp k0q19a_firmware < 2405130_000069 Yes
Hardware hp k0q19a - No
Operating System hp k0q20a_firmware < 2405130_000069 Yes
Hardware hp k0q20a - No
Operating System hp k0q21a_firmware < 2405130_000069 Yes
Hardware hp k0q21a - No
Operating System hp k0q22a_firmware < 2405130_000069 Yes
Hardware hp k0q22a - No
Operating System hp m0p33a_firmware < 2405130_000069 Yes
Hardware hp m0p33a - No
Operating System hp m0p35a_firmware < 2405130_000069 Yes
Hardware hp m0p35a - No
Operating System hp m0p36a_firmware < 2405130_000069 Yes
Hardware hp m0p36a - No
Operating System hp m0p39a_firmware < 2405130_000069 Yes
Hardware hp m0p39a - No
Operating System hp m0p40a_firmware < 2405130_000069 Yes
Hardware hp m0p40a - No
Operating System hp h0dc9a_firmware < 2405129_000047 Yes
Hardware hp h0dc9a - No
Operating System hp l8z07a_firmware < 2405129_000047 Yes
Hardware hp l8z07a - No
Operating System hp j7z98a_firmware < 2405130_000068 Yes
Hardware hp j7z98a - No
Operating System hp j7z99a_firmware < 2405130_000068 Yes
Hardware hp j7z99a - No
Operating System hp j8a04a_firmware < 2405130_000068 Yes
Hardware hp j8a04a - No
Operating System hp j8a05a_firmware < 2405130_000068 Yes
Hardware hp j8a05a - No
Operating System hp j8a06a_firmware < 2405130_000068 Yes
Hardware hp j8a06a - No
Operating System hp l3u55a_firmware < 2405130_000068 Yes
Hardware hp l3u55a - No
Operating System hp l3u56a_firmware < 2405130_000068 Yes
Hardware hp l3u56a - No
Operating System hp l3u57a_firmware < 2405130_000068 Yes
Hardware hp l3u57a - No
Operating System hp j7z04a_firmware < 2405087_018564 Yes
Hardware hp j7z04a - No
Operating System hp j7z06a_firmware < 2405087_018564 Yes
Hardware hp j7z06a - No
Operating System hp cz244a_firmware < 2405129_000059 Yes
Hardware hp cz244a - No
Operating System hp a2w77a_firmware < 2405129_000057 Yes
Hardware hp a2w77a - No
Operating System hp cz245a_firmware < 2405129_000059 Yes
Hardware hp cz245a - No
Operating System hp a2w78a_firmware < 2405129_000057 Yes
Hardware hp a2w78a - No
Operating System hp a2w79a_firmware < 2405129_000057 Yes
Hardware hp a2w79a - No
Operating System hp d7p73a_firmware < 2405129_000057 Yes
Hardware hp d7p73a - No
Operating System hp cf116a_firmware < 2405129_000048 Yes
Hardware hp cf116a - No
Operating System hp cf117a_firmware < 2405129_000048 Yes
Hardware hp cf117a - No
Operating System hp cf118a_firmware < 2405129_000048 Yes
Hardware hp cf118a - No
Operating System hp l3u59a_firmware < 2405129_000048 Yes
Hardware hp l3u59a * No
Operating System hp l3u60a < 2405129_000048 Yes
Hardware hp l3u60a * No
Operating System hp f2a76a_firmware < 2405129_000039 Yes
Hardware hp f2a76a - No
Operating System hp f2a77a_firmware < 2405129_000039 Yes
Hardware hp f2a77a - No
Operating System hp f2a81a_firmware < 2405129_000039 Yes
Hardware hp f2a81a - No
Operating System hp f2a78v_firmware < 2405129_000039 Yes
Hardware hp f2a78v - No
Operating System hp f2a79a_firmware < 2405129_000039 Yes
Hardware hp f2a79a - No
Operating System hp f2a80a_firmware < 2405129_000039 Yes
Hardware hp f2a80a - No
Operating System hp cd644a_firmware < 2405135_000409 Yes
Hardware hp cd644a - No
Operating System hp cd645a_firmware < 2405135_000409 Yes
Hardware hp cd645a - No
Operating System hp cd646a_firmware < 2405129_000045 Yes
Hardware hp cd646a - No
Operating System hp l3u46a_firmware < 2405129_000045 Yes
Hardware hp l3u46a - No
Operating System hp l3u45a_firmware < 2405129_000045 Yes
Hardware hp l3u45a - No
Operating System hp b5l46a_firmware < 2405129_000038 Yes
Hardware hp b5l46a - No
Operating System hp b5l47a_firmware < 2405129_000038 Yes
Hardware hp b5l47a - No
Operating System hp b5l48a_firmware < 2405129_000038 Yes
Hardware hp b5l48a - No
Operating System hp b5l54a_firmware < 2405129_000038 Yes
Hardware hp b5l54a - No
Operating System hp b5l49a_firmware < 2405129_000038 Yes
Hardware hp b5l49a - No
Operating System hp b5l50a_firmware < 2405129_000038 Yes
Hardware hp b5l50a - No
Operating System hp b5l04a_firmware < 2405129_000050 Yes
Hardware hp b5l04a - No
Operating System hp b5l05a_firmware < 2405129_000050 Yes
Hardware hp b5l05a - No
Operating System hp b5l06a_firmware < 2405129_000050 Yes
Hardware hp b5l06a - No
Operating System hp b5l07a_firmware < 2405129_000050 Yes
Hardware hp b5l07a - No
Operating System hp l3u40a_firmware < 2405129_000050 Yes
Hardware hp l3u40a - No
Operating System hp l3u41a_firmware < 2405129_000050 Yes
Hardware hp l3u41a - No
Operating System hp g1w39a_firmware < 2405129_000066 Yes
Hardware hp g1w39a - No
Operating System hp g1w39v_firmware < 2405129_000066 Yes
Hardware hp g1w39v - No
Operating System hp g1w40a_firmware < 2405129_000066 Yes
Hardware hp g1w40a - No
Operating System hp g1w40v_firmware < 2405129_000066 Yes
Hardware hp g1w40v - No
Operating System hp g1w41a_firmware < 2405129_000066 Yes
Hardware hp g1w41a - No
Operating System hp g1w41v_firmware < 2405129_000066 Yes
Hardware hp g1w41v - No
Operating System hp l3u42a_firmware < 2405129_000066 Yes
Hardware hp l3u42a - No
Operating System hp l3u43a_firmware < 2405129_000066 Yes
Hardware hp l3u43a - No
Operating System hp b3g85a_firmware < 2405129_000040 Yes
Hardware hp b3g85a - No
Operating System hp j7x28a_firmware < 2405129_000040 Yes
Hardware hp j7x28a - No
Operating System hp b3g84a_firmware < 2405129_000040 Yes
Hardware hp b3g84a - No
Operating System hp p7z47a_firmware < 2405129_000040 Yes
Hardware hp p7z47a - No
Operating System hp b3g86a_firmware < 2405129_000040 Yes
Hardware hp b3g86a - No
Operating System hp l3u61a_firmware < 2405129_000040 Yes
Hardware hp l3u61a - No
Operating System hp l3u62a_firmware < 2405129_000040 Yes
Hardware hp l3u62a - No
Operating System hp p7z48a_firmware < 2405129_000040 Yes
Hardware hp p7z48a - No
Operating System hp j8j64a_firmware < 2405129_000041 Yes
Hardware hp j8j64a - No
Operating System hp j8j63a_firmware < 2405129_000041 Yes
Hardware hp j8j63a - No
Operating System hp j8j65a_firmware < 2405129_000041 Yes
Hardware hp j8j65a - No
Operating System hp j8j70a_firmware < 2405129_000041 Yes
Hardware hp j8j70a - No
Operating System hp j8j71a_firmware < 2405129_000041 Yes
Hardware hp j8j71a - No
Operating System hp j8j72a_firmware < 2405129_000041 Yes
Hardware hp j8j72a - No
Operating System hp j8j76a_firmware < 2405129_000041 Yes
Hardware hp j8j76a - No
Operating System hp j8j78a_firmware < 2405129_000041 Yes
Hardware hp j8j78a - No
Operating System hp j8j66a_firmware < 2405129_000041 Yes
Hardware hp j8j66a - No
Operating System hp j8j67a_firmware < 2405129_000041 Yes
Hardware hp j8j67a - No
Operating System hp j8j73a_firmware < 2405129_000041 Yes
Hardware hp j8j73a - No
Operating System hp j8j74a_firmware < 2405129_000041 Yes
Hardware hp j8j74a - No
Operating System hp j8j79a_firmware < 2405129_000041 Yes
Hardware hp j8j79a - No
Operating System hp j8j80a_firmware < 2405129_000041 Yes
Hardware hp j8j80a - No
Operating System hp cz248a_firmware < 2405129_000042 Yes
Hardware hp cz248a - No
Operating System hp cz249a_firmware < 2405129_000042 Yes
Hardware hp cz249a - No
Operating System hp cz250a_firmware < 2405129_000042 Yes
Hardware hp cz250a - No
Operating System hp ca251a_firmware < 2405129_000042 Yes
Hardware hp ca251a - No
Operating System hp l3u47a_firmware < 2405129_000042 Yes
Hardware hp l3u47a - No
Operating System hp l3u48a_firmware < 2405129_000042 Yes
Hardware hp l3u48a - No
Operating System hp j8a10a_firmware < 2405129_000037 Yes
Hardware hp j8a10a - No
Operating System hp j8a11a_firmware < 2405129_000037 Yes
Hardware hp j8a11a - No
Operating System hp j8a12a_firmware < 2405129_000037 Yes
Hardware hp j8a12a - No
Operating System hp j8a13a_firmware < 2405129_000037 Yes
Hardware hp j8a13a - No
Operating System hp j8a17a_firmware < 2405129_000037 Yes
Hardware hp j8a17a - No
Operating System hp j8a16a_firmware < 2405129_000037 Yes
Hardware hp j8a16a - No
Operating System hp l3u67a_firmware < 2405129_000037 Yes
Hardware hp l3u67a - No
Operating System hp l3u70a_firmware < 2405129_000037 Yes
Hardware hp l3u70a - No
Operating System hp l3u66a_firmware < 2405129_000037 Yes
Hardware hp l3u66a - No
Operating System hp l3u69a_firmware < 2405129_000037 Yes
Hardware hp l3u69a - No
Operating System hp cf066a_firmware < 2405129_000058 Yes
Hardware hp cf066a - No
Operating System hp cf067a_firmware < 2405129_000058 Yes
Hardware hp cf067a - No
Operating System hp cf068a_firmware < 2405129_000058 Yes
Hardware hp cf068a - No
Operating System hp cf069a_firmware < 2405129_000058 Yes
Hardware hp cf069a - No
Operating System hp l3u63a_firmware < 2405129_000058 Yes
Hardware hp l3u63a - No
Operating System hp l3u64a_firmware < 2405129_000058 Yes
Hardware hp l3u64a - No
Operating System hp cc522a_firmware < 2405135_000405 Yes
Hardware hp cc522a - No
Operating System hp cc523a_firmware < 2405135_000405 Yes
Hardware hp cc523a - No
Operating System hp cc524a_firmware < 2405135_000405 Yes
Hardware hp cc524a - No
Operating System hp l3u49a_firmware < 2405135_000405 Yes
Hardware hp l3u49a - No
Operating System hp l3u50a_firmware < 2405135_000405 Yes
Hardware hp l3u50a - No
Operating System hp cf367a_firmware < 2405129_000060 Yes
Hardware hp cf367a - No
Operating System hp d7p68a_firmware < 2405129_000060 Yes
Hardware hp d7p68a - No
Operating System hp l3u65a_firmware < 2405129_000060 Yes
Hardware hp l3u65a - No
Operating System hp a2w76a_firmware < 2405129_000054 Yes
Hardware hp a2w76a - No
Operating System hp a2w75a_firmware < 2405129_000054 Yes
Hardware hp a2w75a - No
Operating System hp d7p70a_firmware < 2405129_000054 Yes
Hardware hp d7p70a - No
Operating System hp d7p71a_firmware < 2405129_000054 Yes
Hardware hp d7p71a - No
Operating System hp d7p68a_firmware < 2405129_000054 Yes
Hardware hp d7p68a - No
Operating System hp l3u51a_firmware < 2405129_000054 Yes
Hardware hp l3u51a - No
Operating System hp l3u52a_firmware < 2405129_000054 Yes
Hardware hp l3u52a - No
Operating System hp l3u65a_firmware < 2405129_000054 Yes
Hardware hp l3u65a - No
Operating System hp x3a69a_firmware < 2405347_024815 Yes
Hardware hp x3a69a - No
Operating System hp x3a68a_firmware < 2405347_024815 Yes
Hardware hp x3a68a - No
Operating System hp z8z19a_firmware < 2405347_024815 Yes
Hardware hp z8z19a - No
Operating System hp z8z18a_firmware < 2405347_024815 Yes
Hardware hp z8z18a - No
Operating System hp x3a72a_firmware < 2405347_024815 Yes
Hardware hp x3a72a - No
Operating System hp x3a71a_firmware < 2405347_024815 Yes
Hardware hp x3a71a - No
Operating System hp z8z21a_firmware < 2405347_024815 Yes
Hardware hp z8z21a - No
Operating System hp z8z20a_firmware < 2405347_024815 Yes
Hardware hp z8z20a - No
Operating System hp x3a79a_firmware < 2405347_024815 Yes
Hardware hp x3a79a - No
Operating System hp z8z23a_firmware < 2405347_024815 Yes
Hardware hp z8z23a - No
Operating System hp z8z22a_firmware < 2405347_024815 Yes
Hardware hp z8z22a - No
Operating System hp x3a75a_firmware < 2405347_024815 Yes
Hardware hp x3a75a - No
Operating System hp x3a74a_firmware < 2405347_024815 Yes
Hardware hp x3a74a - No
Operating System hp x3a59a_firmware < 2405347_024821 Yes
Hardware hp x3a59a - No
Operating System hp x3a60a_firmware < 2405347_024821 Yes
Hardware hp x3a60a - No
Operating System hp z8z06a_firmware < 2405347_024821 Yes
Hardware hp z8z06a - No
Operating System hp z8z07a_firmware < 2405347_024821 Yes
Hardware hp z8z07a - No
Operating System hp x3a62a_firmware < 2405347_024821 Yes
Hardware hp x3a62a - No
Operating System hp x3a63a_firmware < 2405347_024821 Yes
Hardware hp x3a63a - No
Operating System hp z8z09a_firmware < 2405347_024821 Yes
Hardware hp z8z09a - No
Operating System hp z8z08a_firmware < 2405347_024821 Yes
Hardware hp z8z08a - No
Operating System hp x3a65a_firmware < 2405347_024821 Yes
Hardware hp x3a65a - No
Operating System hp x3a66a_firmware < 2405347_024821 Yes
Hardware hp x3a66a - No
Operating System hp z8z11a_firmware < 2405347_024821 Yes
Hardware hp z8z11a - No
Operating System hp z8z10a_firmware < 2405347_024821 Yes
Hardware hp z8z10a - No
Operating System hp x3a87a_firmware < 2405347_024814 Yes
Hardware hp x3a87a - No
Operating System hp x3a86a_firmware < 2405347_024814 Yes
Hardware hp x3a86a - No
Operating System hp z8z12a_firmware < 2405347_024814 Yes
Hardware hp z8z12a - No
Operating System hp z8z13a_firmware < 2405347_024814 Yes
Hardware hp z8z13a - No
Operating System hp x3a90a_firmware < 2405347_024814 Yes
Hardware hp x3a90a - No
Operating System hp x3a89a_firmware < 2405347_024814 Yes
Hardware hp x3a89a - No
Operating System hp z8z14a_firmware < 2405347_024814 Yes
Hardware hp z8z14a - No
Operating System hp z8z15a_firmware < 2405347_024814 Yes
Hardware hp z8z15a - No
Operating System hp x3a92a_firmware < 2405347_024814 Yes
Hardware hp x3a92a - No
Operating System hp x3a93a_firmware < 2405347_024814 Yes
Hardware hp x3a93a - No
Operating System hp z8z16a_firmware < 2405347_024814 Yes
Hardware hp z8z16a - No
Operating System hp z8z17a_firmware < 2405347_024814 Yes
Hardware hp z8z17a - No
Operating System hp x3a78a_firmware < 2405347_024820 Yes
Hardware hp x3a78a - No
Operating System hp x3a77a_firmware < 2405347_024820 Yes
Hardware hp x3a77a - No
Operating System hp z8z00a_firmware < 2405347_024820 Yes
Hardware hp z8z00a - No
Operating System hp z8z01a_firmware < 2405347_024820 Yes
Hardware hp z8z01a - No
Operating System hp x3a81a_firmware < 2405347_024820 Yes
Hardware hp x3a81a - No
Operating System hp x3a80a_firmware < 2405347_024820 Yes
Hardware hp x3a80a - No
Operating System hp z8z02a_firmware < 2405347_024820 Yes
Hardware hp z8z02a - No
Operating System hp z8z03a_firmware < 2405347_024820 Yes
Hardware hp z8z03a - No
Operating System hp x3a84a_firmware < 2405347_024820 Yes
Hardware hp x3a84a - No
Operating System hp x3a83a_firmware < 2405347_024820 Yes
Hardware hp x3a83a - No
Operating System hp z8z05a_firmware < 2405347_024820 Yes
Hardware hp z8z05a - No
Operating System hp z8z04a_firmware < 2405347_024820 Yes
Hardware hp z8z04a - No
Operating System hp l2762a_firmware < 2405087_018553 Yes
Hardware hp l2762a - No
Operating System hp l2683a_firmware < 2405087_018552 Yes
Hardware hp l2683a - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For hp's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.