Tuesday, November 26, 2024
HomeComputer SecurityHP Released Security Updates For Critical Remote Code Execution With Inkjet Printers

HP Released Security Updates For Critical Remote Code Execution With Inkjet Printers

Published on

HP released security updates for two critical Remote Code Execution vulnerabilities with HP Inkjet Printers. The vulnerability can be tracked as CVE-2018-5924 and CVE-2018-5925.

The vulnerability affects multiple HP products that include Hp Pagewide Pro, HP DesignJet, HP Officejet, HP Deskjet and HP Envy.

The two critical vulnerabilities could be exploited by a remote attacker by sending a carefully crafted file that could result in a stack or static buffer overflow, which could allow remote code execution.

Both of the vulnerabilities receive base score 9.8(Critical) and it affects more than 160 HP Ink Printer models.

- Advertisement - SIEM as a Service

Now HP released firmware updates for all the affected models, you can get the Upgrading Printer Firmware from the HP drivers page for your product.

 
Reference
Base Vector
Base Score
CVE-2018-5924
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical)
CVE-2018-5925
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical)

You can apply the upgrades directly from your printer depending on your printer, apps on the printer control panel might also receive updates.

Recently HP launched print security bug bounty program which reward researchers based on the severity of the flaw and awards up to $10,000.

HP Released Security Updates for Following Vulnerable HP products

Pagewide Pro
Product Name
Product Number
Firmware Revision
HP PageWide 352dw
J6U57B
001.1829A
HP PageWide Managed MFP P57750dw
J9V82A
J9V82B
J9V82C
J9V82D
001.1829A
HP PageWide Managed MFP P77740dn
Y3Z57
005.1828A
HP PageWide Managed MFP P77740dw
W1B33
005.1828A
HP PageWide Managed MFP P77740z
W1B39
005.1828A
HP PageWide Managed MFP P77750z
W1B37
005.1828A
HP PageWide Managed MFP P77760z
W1B38
005.1828A
HP PageWide Managed P55250dw
J6U55A
J6U55B
J6U55C
J6U55D
001.1829A
HP PageWide Managed P75050dn
Y3Z45
005.1828A
HP PageWide Managed P75050dw
Y3Z47
005.1828A
HP PageWide MFP 377dw
J9V80A
J9V80B
001.1829A
HP PageWide Pro 452dn
D3Q15A
D3Q15B
D3Q15D
001.1829A
HP PageWide Pro 552dw
D3Q17A
D3Q17C
D3Q17D
001.1829A
HP PageWide Pro 750dn
Y3Z46
005.1828A
HP PageWide Pro 750dw
Y3Z44
005.1828A
HP PageWide Pro MFP 477dn
D3Q19A
D3Q19D
001.1829A
HP PageWide Pro MFP 477dw
D3Q20A
D3Q20B
D3Q20C
D3Q20D
001.1829A
HP PageWide Pro MFP 577dw
D3Q21A
D3Q21C
D3Q21D
001.1829A
HP PageWide Pro MFP 577z
K9Z76A
K9Z76D
001.1829A
HP PageWide Pro MFP 772dn
W1B31
005.1828A
HP PageWide Pro MFP 772dw
Y3Z54
005.1828A
HP PageWide Pro 452dw
D3Q16A
D3Q16B
D3Q16C
D3Q16D
001.1829A
HP DesignJet
Product Name
Product Number
Firmware Revision
HP DesignJet rugged case
N9M07A
1829A
HP Designjet T120 24-in ePrinter
CQ891A
1829B
HP Designjet T120 24-in Printer
CQ891B
1829B
HP Designjet T120 24-in Printer (2018 edition)
CQ891C
1829B
HP Designjet T120 24-in Rmkt ePrinter
CQ891AR
1829B
HP Designjet T520 24-in ePrinter
CQ890A
1829B
HP Designjet T520 24-in Printer
CQ890B
1829B
HP Designjet T520 24-in Printer (2018 edition)
CQ890C
1829B
HP Designjet T520 24-in Printer (2018 edition)
CQ890D
1829B
HP Designjet T520 24-in Printer (2018 edition, legless)
CQ890E
1829B
HP Designjet T520 24-in Rmkt ePrinter
CQ890AR
1829B
HP Designjet T520 36-in ePrinter
CQ893A
1829B
HP Designjet T520 36-in Printer
CQ893B
1829B
HP Designjet T520 36-in Printer (2018 edition)
CQ893C
1829B
HP Designjet T520 36-in Printer (2018 edition, legless)
CQ893E
1829B
HP Designjet T520 36-in Rmkt ePrinter
CQ893AR
1829B
HP DesignJet T730 36in Printer
F9A29A
1829A
HP DesignJet T730 36in Printer
F9A29B
1829A
HP Designjet T730 with Rugged Case
T5D66A
1829A
HP DesignJet T830 24in eMFP Printer
F9A28A
1829A
HP DesignJet T830 24-in MFP Printer
F9A28B
1829A
HP DesignJet T830 MFP with Armor Case
1JL02B
1829A
HP DesignJet T830 MFP with Armour Case
1JL02A
1829A
HP DesignJet T830 MFP with Rugged Case
T5D67A
1829A
HP Officejet, HP Deskjet and HP Envy
Product Name
Product Number
FirmwareRevision
HP AMP 1xx Printer series
T8X39 – T8X44
1SH08
3AW44A – 3AW51A
1828A
HP Deskjet 2540 All-in-One
A9U19A – A9U28B
D3A78B – D3A82A
1828B
HP DeskJet 2600 All-in-One Printer
4UJ28B
V1N01A – V1N08A
Y5H60A – Y5H80A
1828A
HP DeskJet 2600 All-in-One Printer
CZ992A
L9D57A
N4L17A
1828A
HP Deskjet 2620 Ink Advantage series
D4H22A – D4H24B
1826A
HP Deskjet 3540 series
A9T81A
A9T81C
A9T83B
1828A
HP DeskJet 3630 series
F5S43A – F5S57A
K4T93A – K4T99B
K4U00B – K4U04B
1829A
HP DeskJet 3700 All-in-One Printer series
J9V86A
1828A
HP DeskJet 3700 All-in-One Printer series
J9V86A – J9V96A
T8W51A – T8W73A
1828A
HP Deskjet 4510 series
A9J41 – A9J43
1828B
HP DeskJet 4530 series
F0V64 – F0V66
J6U63
W3U23 – W3U24
1827B
HP DeskJet 4720 series
F5S65A – F5S66A
L8L91A
1829A
HP DeskJet 5000 series
M2U86 – M2U90
1828A
HP DeskJet 5275 All-in-One Printer
M2U76 – M2U80
1828A
HP DeskJet 5640 series
B9S57C
1821B
HP DeskJet 5730 series
F5S60A – F5S61A
T0A23A – T0A25A
1824A
HP DeskJet GT 5820 All-in-One Printer series
M2Q28A
P0R21A
X3B09A
2ND31A
1829A
HP Deskjet Ink Advantage 2540 All-in-One
A9U23 – A9U28
1828B
HP DeskJet Ink Advantage 2600 All-in-One Printer
V1N02A – V1N02C
1828A
HP DeskJet Ink Advantage 2600 All-in-One Printer
Y5Z00A – Y5Z07B
1828A
HP DeskJet Ink Advantage 3630 All-in-One Printer
F5S43 – F5S57
K9U05B
1829A
HP DeskJet Ink Advantage 3700 All-in-One Printer series
1DT61A – 1DT62A
3YZ74A – 3YZ75A
4SC29A – 4SC30A
J9V87A – J9V89B
T8W35A – T8W50C
1828A
HP Deskjet Ink Advantage 3830 e-All-in-One Printer
F5R96A – F5R98B
K7V42C – K7V43C
1825A
HP Deskjet Ink Advantage 4615 All-in-One Printer
CZ283A – CZ283C
1829A
HP Deskjet Ink Advantage 4625 e-All-in-One
CZ284A – CZ284C
1829A
HP Deskjet Ink Advantage 4640 e-All-in-One Printer series
B4L08A – B4L10A
1825A
HP DeskJet Ink Advantage 4670 All-in-One Printer
F1H97 – F1H199
1826A
HP Deskjet Ink Advantage 5525 e-All-in-One
CZ282A – CZ282C
1828B
HP DeskJet Ink Advantage 5570 All-in-One printer
G0V48B
G0V48C
1821A
HP Deskjet Ink Advantage 6525 e-All-in-One
CZ276A – CZ76C
1828B
HP Envy 120 Series
CQ176 – CQ190
1827A
HP ENVY 4500 series
A9T80A
A9T80B
A9T89A
D3P93A
1828A
HP ENVY 4510 All-in-One Printer
K9H48 – K9H57
1827B
HP ENVY 4520 series
F0V63
F0V67 – F0V74
K9T01 – K9T10
J6U59 – J6U62
J6U69 – J6U70
K9H57
W3U25 – W3U27
1827B
HP ENVY 5000 series
M2U85
M2U91-M2U94
Z4A54 – Z4A78
1828A
HP ENVY 5530 series
A9J40A – A9J48B
D4J85B – D4J86B
1828B
HP ENVY 5540 All-in-One Printer
G0V47
G0450 – G0V56
K7C84 – K7C93
K7G86 – K7G90
1821A
HP ENVY 5640 series
B9S56A
B9S58A – B9S65A
F8B05A
F8B13A
1824A
HP ENVY 5660 series
F8B04A
F8B06A – F8B08A
F8B12A
1824A
HP ENVY 7640 series
E4W43-E4W48
1825C
HP ENVY Photo 6200 All-in-One Printer series
K7G18A-K7G29A
1829D
HP ENVY Photo 7100 All-in-One Printer series
K7G93A-K7G99
1829D
HP ENVY Photo 7100 All-in-One Printer series
K7S00A
1829D
HP Ink Tank 310
Z6Z11A
1737J
1805J
HP Ink Tank Wireless 410
Z4B53A – Z4B55A
Z6Z95A
Z6Z97A
1737J
1805J
HP Officejet Pro X451dn Printer
CN459A
1829B
HP Officejet Pro X451dw Printer
CN463A
1829B
HP Officejet Pro X476dn MFP
CN460A
1829B
HP Officejet Pro X476dw MFP
CN461A
1829B
HP Officejet Pro X551dw Printer
CV037A
1829B
HP Officejet Pro X576dn MFP
CN462A
1829B
HP Officejet Pro X576dw MFP
C598A
1829B
HP OfficeJet 200 Mobile series
CZ993A
L9B95A
1827A
HP OfficeJet 202 Mobile series
N4L14C
N4K99C
1827A
HP OfficeJet 252 Mobile All-in-One
N4L18C
1828A
HP Officejet 2620 series
D4H21A – D4H21B
D4H25A – D4H29B
1826A
HP Officejet 3830 e-All-in-One Printer
F5R95
F5S00 – F5S04
K7V35 – K7V49
1825A
HP Officejet 4610 e-All-in-One Printer
CR771A
1829A
HP Officejet 4620 e-All-in-One Printer
CZ152A – CZ152C
1829A
HP Officejet 4622 e-All-in-One Printer
CZ294A – CZ296B
1829A
HP Officejet 4630 e-All-in-One Printer series
B4L03 – B4L07A
D4J74 – D4J78
1825A
HP OfficeJet 4650 All-in-One Printer
F1H96
F1J00 – F1J07
F9D36 – F9D38
K9V76 – K9V85
V6D27- V6D32
1826A
HP OfficeJet 5200 AlI-in-One Printer
M2U75
M2U81-M2U84
Z4B12 – Z4B36
1828A
HP Officejet 5740 series
B9S76-B9S85
F8B09-F8B11
T1P36-T1P38
1825A
HP Officejet 6220 / HP Officejet Pro 6230 ePrinter
E3E03A
C9S13A
1827A
HP OfficeJet 6600 e-All-in-One
CN581A
1827D
HP OfficeJet 6700 Premium e-All-in-One
CN583A
1827D
HP Officejet 6810/6820 e-All-in-One Printer
F0M65A
G1W52A
1828A
HP OfficeJet 6950 All-in-One
P4C78A – P4C87A
T3P03A
T3P04A
1828A
HP OfficeJet 6960 All-in-One
HP OfficeJet Pro 6960 All-in-One
J7K33A – J7K39A
T0F28A – T0F38A
T0G25A – T0G26A
1828A
HP Officejet 7110 Wide Format ePrinter
CR768A
1827A
HP Officejet 7510 Wide Format All-in-One Printer
G3J47A
1829A
HP Officejet 7610 series Wide Format e-All-in-One Printer
CR769A
1828B
HP Officejet 7612 Wide Format e-All-in-One
G1X85A
1829A
HP Officejet Pro 251dw Printer
CV136A
1828A
HP Officejet Pro 276dw Multifunction Printer
CR7770A
1829A
HP Officejet Pro 3610 Black and White Printer
CZ292A
1828A
HP Officejet Pro 3620 Black and White Printer
CZ293A
1828A
HP Officejet Pro 6830 e-All-in-One Printer
E3E02A
J2D37A
1828A
HP OfficeJet Pro 6970 All-in-One Printer
J7K34A – J7K42A
T0F29A – T0F40A
1828A
HP OfficeJet Pro 7720 Wide Format All-in-One
Y0S18A
1830A
HP OfficeJet Pro 7730 Wide Format All-in-One
Y0S19A
1830A
HP OfficeJet Pro 7740 Wide Format All-in-One
G5J38A
T1P99
T1Q00 – T1Q02
1828A
HP OfficeJet Pro 8210 Printer
HP OfficeJet Pro 8216
D9L63A
D9L64A
T0G70A
J3P68A
1827B
HP OfficeJet Pro 8600A e-All-in-One
CM749A
1829A
HP OfficeJet Pro 8600A Plus e-All-in-One
CM750A
1829A
HP OfficeJet Pro 8600A Premium e-All-in-One
CN577A
1829A
HP Officejet Pro 8610 e-All-in-One Printer
A7F64A
D7Z36A
E1D34A
J5T77A
T0K98A
1828A
HP Officejet Pro 8620 e-All-in-One Printer
A7F65A
D7Z37A
1828A
HP Officejet Pro 8630 e-All-in-One Printer
A7F66A
1828A
HP Officejet Pro 8640 e-All-in-One Printer
E2D42A
1828B
HP Officejet Pro 8660 e-All-in-One Printer
E1D36A
1828A
HP OfficeJet Pro 8710 All-in-One Printer
D9L18A
J6X76A – J6X78A
J6X80A – J6X81A
K7S37A – K7S38A
M9L65A – M9L66A
M9L70A
M9L81A
T0G45A – T0G49A
1828A
HP OfficeJet Pro 8720 All-in-One Printer
D9L19A
J7A28A
J7A31A
K7S34A – K7S36A
M9L73A – M9L75A
M9L80A
T0G50A – T0G51A
T0G54A
T6T77A
1828A
HP OfficeJet Pro 8730
D9L20A
1827B
HP OfficeJet Pro 8732M All-in-One Printer
T0G56A – T0G59A
1827A
HP OfficeJet Pro 8740
K7S42A
1827B
HP Photosmart 5510 series
CQ176-CQ190
TBD
HP Photosmart 5510d series
CQ761-CQ769
1829B
HP Photosmart 5520 series e-All-in-One
HP Photosmart 5521 e-All-in-One
HP Photosmart 5522 e-All-in-One
HP Photosmart 5524 e-All-in-One
HP Photosmart 5525 e-All-in-One
CX042 – CX049
1828B
HP Photosmart 6510 series
CQ761-CQ769
1829B
HP Photosmart 6520 e-All-in-One
CX017A – CX021C
1828B
HP Photosmart 7520 series
CZ025A
CZ045A – CZ046A
1826A
HP Photosmart Plus All-in-One B210 series
B210
1829A
HP Smart Tank Wireless 450
Z4B07A
Z4B56A
1737J
1805J

Also Read

Apache Software Foundation Releases Important Security Patches for Multiple Apache Tomcat Versions

Google Chrome to Show Not Secure For HTTP Sites and Fix for 42 Security Issues

Ubuntu Security Updates for Vulnerabilities that Affects Multiple Versions

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Blue Yonder Ransomware Attack Impacts Starbucks & Multiple Supermarkets

A ransomware attack on Blue Yonder, a leading supply chain management software provider, has...

Dell Wyse Management Suite Vulnerabilities Let Attackers Exploit Affected Systems Remotely

Dell Technologies has released a security update for its Wyse Management Suite (WMS) to...

CISA Details Red Team Assessment Including TTPs & Network Defense

The Cybersecurity and Infrastructure Security Agency (CISA) recently detailed findings from a Red Team...

IBM Workload Scheduler Vulnerability Stores User Credentials in Plain Text

IBM has issued a security bulletin warning customers about a vulnerability in its Workload...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Nearest Neighbor Attacks: Russian APT Hack The Target By Exploiting Nearby Wi-Fi Networks

Recent research has revealed that a Russian advanced persistent threat (APT) group, tracked as...

Digital Wallets Bypassed To Allow Purchase With Stolen Cards

Digital wallets enable users to securely store their financial information on smart devices and...

Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE Flaw

Microsoft has disclosed two Critical remote code execution vulnerabilities in MSMQ (Microsoft Message Queuing)...