HP released security updates for two critical Remote Code Execution vulnerabilities with HP Inkjet Printers. The vulnerability can be tracked as CVE-2018-5924 and CVE-2018-5925.
The vulnerability affects multiple HP products that include Hp Pagewide Pro, HP DesignJet, HP Officejet, HP Deskjet and HP Envy.
The two critical vulnerabilities could be exploited by a remote attacker by sending a carefully crafted file that could result in a stack or static buffer overflow, which could allow remote code execution.
Both of the vulnerabilities receive base score 9.8(Critical) and it affects more than 160 HP Ink Printer models.
- Advertisement -
.png
)
Now HP released firmware updates for all the affected models, you can get the Upgrading Printer Firmware from the HP drivers page for your product.
|
Reference
|
Base Vector
|
Base Score
|
|
CVE-2018-5924
|
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
9.8 (Critical)
|
|
CVE-2018-5925
|
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
9.8 (Critical)
|
You can apply the upgrades directly from your printer depending on your printer, apps on the printer control panel might also receive updates.
Recently HP launched print security bug bounty program which reward researchers based on the severity of the flaw and awards up to $10,000.
HP Released Security Updates for Following Vulnerable HP products
Pagewide Pro
|
Product Name
|
Product Number
|
Firmware Revision
|
|
HP PageWide 352dw
|
J6U57B
|
001.1829A
|
|
HP PageWide Managed MFP P57750dw
|
J9V82A
J9V82B
J9V82C
J9V82D
|
001.1829A
|
|
HP PageWide Managed MFP P77740dn
|
Y3Z57
|
005.1828A
|
|
HP PageWide Managed MFP P77740dw
|
W1B33
|
005.1828A
|
|
HP PageWide Managed MFP P77740z
|
W1B39
|
005.1828A
|
|
HP PageWide Managed MFP P77750z
|
W1B37
|
005.1828A
|
|
HP PageWide Managed MFP P77760z
|
W1B38
|
005.1828A
|
|
HP PageWide Managed P55250dw
|
J6U55A
J6U55B
J6U55C
J6U55D
|
001.1829A
|
|
HP PageWide Managed P75050dn
|
Y3Z45
|
005.1828A
|
|
HP PageWide Managed P75050dw
|
Y3Z47
|
005.1828A
|
|
HP PageWide MFP 377dw
|
J9V80A
J9V80B
|
001.1829A
|
|
HP PageWide Pro 452dn
|
D3Q15A
D3Q15B
D3Q15D
|
001.1829A
|
|
HP PageWide Pro 552dw
|
D3Q17A
D3Q17C
D3Q17D
|
001.1829A
|
|
HP PageWide Pro 750dn
|
Y3Z46
|
005.1828A
|
|
HP PageWide Pro 750dw
|
Y3Z44
|
005.1828A
|
|
HP PageWide Pro MFP 477dn
|
D3Q19A
D3Q19D
|
001.1829A
|
|
HP PageWide Pro MFP 477dw
|
D3Q20A
D3Q20B
D3Q20C
D3Q20D
|
001.1829A
|
|
HP PageWide Pro MFP 577dw
|
D3Q21A
D3Q21C
D3Q21D
|
001.1829A
|
|
HP PageWide Pro MFP 577z
|
K9Z76A
K9Z76D
|
001.1829A
|
|
HP PageWide Pro MFP 772dn
|
W1B31
|
005.1828A
|
|
HP PageWide Pro MFP 772dw
|
Y3Z54
|
005.1828A
|
|
HP PageWide Pro 452dw
|
D3Q16A
D3Q16B
D3Q16C
D3Q16D
|
001.1829A
|
HP DesignJet
|
Product Name
|
Product Number
|
Firmware Revision
|
|
HP DesignJet rugged case
|
N9M07A
|
1829A
|
|
HP Designjet T120 24-in ePrinter
|
CQ891A
|
1829B
|
|
HP Designjet T120 24-in Printer
|
CQ891B
|
1829B
|
|
HP Designjet T120 24-in Printer (2018 edition)
|
CQ891C
|
1829B
|
|
HP Designjet T120 24-in Rmkt ePrinter
|
CQ891AR
|
1829B
|
|
HP Designjet T520 24-in ePrinter
|
CQ890A
|
1829B
|
|
HP Designjet T520 24-in Printer
|
CQ890B
|
1829B
|
|
HP Designjet T520 24-in Printer (2018 edition)
|
CQ890C
|
1829B
|
|
HP Designjet T520 24-in Printer (2018 edition)
|
CQ890D
|
1829B
|
|
HP Designjet T520 24-in Printer (2018 edition, legless)
|
CQ890E
|
1829B
|
|
HP Designjet T520 24-in Rmkt ePrinter
|
CQ890AR
|
1829B
|
|
HP Designjet T520 36-in ePrinter
|
CQ893A
|
1829B
|
|
HP Designjet T520 36-in Printer
|
CQ893B
|
1829B
|
|
HP Designjet T520 36-in Printer (2018 edition)
|
CQ893C
|
1829B
|
|
HP Designjet T520 36-in Printer (2018 edition, legless)
|
CQ893E
|
1829B
|
|
HP Designjet T520 36-in Rmkt ePrinter
|
CQ893AR
|
1829B
|
|
HP DesignJet T730 36in Printer
|
F9A29A
|
1829A
|
|
HP DesignJet T730 36in Printer
|
F9A29B
|
1829A
|
|
HP Designjet T730 with Rugged Case
|
T5D66A
|
1829A
|
|
HP DesignJet T830 24in eMFP Printer
|
F9A28A
|
1829A
|
|
HP DesignJet T830 24-in MFP Printer
|
F9A28B
|
1829A
|
|
HP DesignJet T830 MFP with Armor Case
|
1JL02B
|
1829A
|
|
HP DesignJet T830 MFP with Armour Case
|
1JL02A
|
1829A
|
|
HP DesignJet T830 MFP with Rugged Case
|
T5D67A
|
1829A
|
HP Officejet, HP Deskjet and HP Envy
|
Product Name
|
Product Number
|
FirmwareRevision
|
|
HP AMP 1xx Printer series
|
T8X39 – T8X44
1SH08
3AW44A – 3AW51A
|
1828A
|
|
HP Deskjet 2540 All-in-One
|
A9U19A – A9U28B
D3A78B – D3A82A
|
1828B
|
|
HP DeskJet 2600 All-in-One Printer
|
4UJ28B
V1N01A – V1N08A
Y5H60A – Y5H80A
|
1828A
|
|
HP DeskJet 2600 All-in-One Printer
|
CZ992A
L9D57A
N4L17A
|
1828A
|
|
HP Deskjet 2620 Ink Advantage series
|
D4H22A – D4H24B
|
1826A
|
|
HP Deskjet 3540 series
|
A9T81A
A9T81C
A9T83B
|
1828A
|
|
HP DeskJet 3630 series
|
F5S43A – F5S57A
K4T93A – K4T99B
K4U00B – K4U04B
|
1829A
|
|
HP DeskJet 3700 All-in-One Printer series
|
J9V86A
|
1828A
|
|
HP DeskJet 3700 All-in-One Printer series
|
J9V86A – J9V96A
T8W51A – T8W73A
|
1828A
|
|
HP Deskjet 4510 series
|
A9J41 – A9J43
|
1828B
|
|
HP DeskJet 4530 series
|
F0V64 – F0V66
J6U63
W3U23 – W3U24
|
1827B
|
|
HP DeskJet 4720 series
|
F5S65A – F5S66A
L8L91A
|
1829A
|
|
HP DeskJet 5000 series
|
M2U86 – M2U90
|
1828A
|
|
HP DeskJet 5275 All-in-One Printer
|
M2U76 – M2U80
|
1828A
|
|
HP DeskJet 5640 series
|
B9S57C
|
1821B
|
|
HP DeskJet 5730 series
|
F5S60A – F5S61A
T0A23A – T0A25A
|
1824A
|
|
HP DeskJet GT 5820 All-in-One Printer series
|
M2Q28A
P0R21A
X3B09A
2ND31A
|
1829A
|
|
HP Deskjet Ink Advantage 2540 All-in-One
|
A9U23 – A9U28
|
1828B
|
|
HP DeskJet Ink Advantage 2600 All-in-One Printer
|
V1N02A – V1N02C
|
1828A
|
|
HP DeskJet Ink Advantage 2600 All-in-One Printer
|
Y5Z00A – Y5Z07B
|
1828A
|
|
HP DeskJet Ink Advantage 3630 All-in-One Printer
|
F5S43 – F5S57
K9U05B
|
1829A
|
|
HP DeskJet Ink Advantage 3700 All-in-One Printer series
|
1DT61A – 1DT62A
3YZ74A – 3YZ75A
4SC29A – 4SC30A
J9V87A – J9V89B
T8W35A – T8W50C
|
1828A
|
|
HP Deskjet Ink Advantage 3830 e-All-in-One Printer
|
F5R96A – F5R98B
K7V42C – K7V43C
|
1825A
|
|
HP Deskjet Ink Advantage 4615 All-in-One Printer
|
CZ283A – CZ283C
|
1829A
|
|
HP Deskjet Ink Advantage 4625 e-All-in-One
|
CZ284A – CZ284C
|
1829A
|
|
HP Deskjet Ink Advantage 4640 e-All-in-One Printer series
|
B4L08A – B4L10A
|
1825A
|
|
HP DeskJet Ink Advantage 4670 All-in-One Printer
|
F1H97 – F1H199
|
1826A
|
|
HP Deskjet Ink Advantage 5525 e-All-in-One
|
CZ282A – CZ282C
|
1828B
|
|
HP DeskJet Ink Advantage 5570 All-in-One printer
|
G0V48B
G0V48C
|
1821A
|
|
HP Deskjet Ink Advantage 6525 e-All-in-One
|
CZ276A – CZ76C
|
1828B
|
|
HP Envy 120 Series
|
CQ176 – CQ190
|
1827A
|
|
HP ENVY 4500 series
|
A9T80A
A9T80B
A9T89A
D3P93A
|
1828A
|
|
HP ENVY 4510 All-in-One Printer
|
K9H48 – K9H57
|
1827B
|
|
HP ENVY 4520 series
|
F0V63
F0V67 – F0V74
K9T01 – K9T10
J6U59 – J6U62
J6U69 – J6U70
K9H57
W3U25 – W3U27
|
1827B
|
|
HP ENVY 5000 series
|
M2U85
M2U91-M2U94
Z4A54 – Z4A78
|
1828A
|
|
HP ENVY 5530 series
|
A9J40A – A9J48B
D4J85B – D4J86B
|
1828B
|
|
HP ENVY 5540 All-in-One Printer
|
G0V47
G0450 – G0V56
K7C84 – K7C93
K7G86 – K7G90
|
1821A
|
|
HP ENVY 5640 series
|
B9S56A
B9S58A – B9S65A
F8B05A
F8B13A
|
1824A
|
|
HP ENVY 5660 series
|
F8B04A
F8B06A – F8B08A
F8B12A
|
1824A
|
|
HP ENVY 7640 series
|
E4W43-E4W48
|
1825C
|
|
HP ENVY Photo 6200 All-in-One Printer series
|
K7G18A-K7G29A
|
1829D
|
|
HP ENVY Photo 7100 All-in-One Printer series
|
K7G93A-K7G99
|
1829D
|
|
HP ENVY Photo 7100 All-in-One Printer series
|
K7S00A
|
1829D
|
|
HP Ink Tank 310
|
Z6Z11A
|
1737J
1805J
|
|
HP Ink Tank Wireless 410
|
Z4B53A – Z4B55A
Z6Z95A
Z6Z97A
|
1737J
1805J
|
|
HP Officejet Pro X451dn Printer
|
CN459A
|
1829B
|
|
HP Officejet Pro X451dw Printer
|
CN463A
|
1829B
|
|
HP Officejet Pro X476dn MFP
|
CN460A
|
1829B
|
|
HP Officejet Pro X476dw MFP
|
CN461A
|
1829B
|
|
HP Officejet Pro X551dw Printer
|
CV037A
|
1829B
|
|
HP Officejet Pro X576dn MFP
|
CN462A
|
1829B
|
|
HP Officejet Pro X576dw MFP
|
C598A
|
1829B
|
|
HP OfficeJet 200 Mobile series
|
CZ993A
L9B95A
|
1827A
|
|
HP OfficeJet 202 Mobile series
|
N4L14C
N4K99C
|
1827A
|
|
HP OfficeJet 252 Mobile All-in-One
|
N4L18C
|
1828A
|
|
HP Officejet 2620 series
|
D4H21A – D4H21B
D4H25A – D4H29B
|
1826A
|
|
HP Officejet 3830 e-All-in-One Printer
|
F5R95
F5S00 – F5S04
K7V35 – K7V49
|
1825A
|
|
HP Officejet 4610 e-All-in-One Printer
|
CR771A
|
1829A
|
|
HP Officejet 4620 e-All-in-One Printer
|
CZ152A – CZ152C
|
1829A
|
|
HP Officejet 4622 e-All-in-One Printer
|
CZ294A – CZ296B
|
1829A
|
|
HP Officejet 4630 e-All-in-One Printer series
|
B4L03 – B4L07A
D4J74 – D4J78
|
1825A
|
|
HP OfficeJet 4650 All-in-One Printer
|
F1H96
F1J00 – F1J07
F9D36 – F9D38
K9V76 – K9V85
V6D27- V6D32
|
1826A
|
|
HP OfficeJet 5200 AlI-in-One Printer
|
M2U75
M2U81-M2U84
Z4B12 – Z4B36
|
1828A
|
|
HP Officejet 5740 series
|
B9S76-B9S85
F8B09-F8B11
T1P36-T1P38
|
1825A
|
|
HP Officejet 6220 / HP Officejet Pro 6230 ePrinter
|
E3E03A
C9S13A
|
1827A
|
|
HP OfficeJet 6600 e-All-in-One
|
CN581A
|
1827D
|
|
HP OfficeJet 6700 Premium e-All-in-One
|
CN583A
|
1827D
|
|
HP Officejet 6810/6820 e-All-in-One Printer
|
F0M65A
G1W52A
|
1828A
|
|
HP OfficeJet 6950 All-in-One
|
P4C78A – P4C87A
T3P03A
T3P04A
|
1828A
|
|
HP OfficeJet 6960 All-in-One
HP OfficeJet Pro 6960 All-in-One
|
J7K33A – J7K39A
T0F28A – T0F38A
T0G25A – T0G26A
|
1828A
|
|
HP Officejet 7110 Wide Format ePrinter
|
CR768A
|
1827A
|
|
HP Officejet 7510 Wide Format All-in-One Printer
|
G3J47A
|
1829A
|
|
HP Officejet 7610 series Wide Format e-All-in-One Printer
|
CR769A
|
1828B
|
|
HP Officejet 7612 Wide Format e-All-in-One
|
G1X85A
|
1829A
|
|
HP Officejet Pro 251dw Printer
|
CV136A
|
1828A
|
|
HP Officejet Pro 276dw Multifunction Printer
|
CR7770A
|
1829A
|
|
HP Officejet Pro 3610 Black and White Printer
|
CZ292A
|
1828A
|
|
HP Officejet Pro 3620 Black and White Printer
|
CZ293A
|
1828A
|
|
HP Officejet Pro 6830 e-All-in-One Printer
|
E3E02A
J2D37A
|
1828A
|
|
HP OfficeJet Pro 6970 All-in-One Printer
|
J7K34A – J7K42A
T0F29A – T0F40A
|
1828A
|
|
HP OfficeJet Pro 7720 Wide Format All-in-One
|
Y0S18A
|
1830A
|
|
HP OfficeJet Pro 7730 Wide Format All-in-One
|
Y0S19A
|
1830A
|
|
HP OfficeJet Pro 7740 Wide Format All-in-One
|
G5J38A
T1P99
T1Q00 – T1Q02
|
1828A
|
|
HP OfficeJet Pro 8210 Printer
HP OfficeJet Pro 8216
|
D9L63A
D9L64A
T0G70A
J3P68A
|
1827B
|
|
HP OfficeJet Pro 8600A e-All-in-One
|
CM749A
|
1829A
|
|
HP OfficeJet Pro 8600A Plus e-All-in-One
|
CM750A
|
1829A
|
|
HP OfficeJet Pro 8600A Premium e-All-in-One
|
CN577A
|
1829A
|
|
HP Officejet Pro 8610 e-All-in-One Printer
|
A7F64A
D7Z36A
E1D34A
J5T77A
T0K98A
|
1828A
|
|
HP Officejet Pro 8620 e-All-in-One Printer
|
A7F65A
D7Z37A
|
1828A
|
|
HP Officejet Pro 8630 e-All-in-One Printer
|
A7F66A
|
1828A
|
|
HP Officejet Pro 8640 e-All-in-One Printer
|
E2D42A
|
1828B
|
|
HP Officejet Pro 8660 e-All-in-One Printer
|
E1D36A
|
1828A
|
|
HP OfficeJet Pro 8710 All-in-One Printer
|
D9L18A
J6X76A – J6X78A
J6X80A – J6X81A
K7S37A – K7S38A
M9L65A – M9L66A
M9L70A
M9L81A
T0G45A – T0G49A
|
1828A
|
|
HP OfficeJet Pro 8720 All-in-One Printer
|
D9L19A
J7A28A
J7A31A
K7S34A – K7S36A
M9L73A – M9L75A
M9L80A
T0G50A – T0G51A
T0G54A
T6T77A
|
1828A
|
|
HP OfficeJet Pro 8730
|
D9L20A
|
1827B
|
|
HP OfficeJet Pro 8732M All-in-One Printer
|
T0G56A – T0G59A
|
1827A
|
|
HP OfficeJet Pro 8740
|
K7S42A
|
1827B
|
|
HP Photosmart 5510 series
|
CQ176-CQ190
|
TBD
|
|
HP Photosmart 5510d series
|
CQ761-CQ769
|
1829B
|
|
HP Photosmart 5520 series e-All-in-One
HP Photosmart 5521 e-All-in-One
HP Photosmart 5522 e-All-in-One
HP Photosmart 5524 e-All-in-One
HP Photosmart 5525 e-All-in-One
|
CX042 – CX049
|
1828B
|
|
HP Photosmart 6510 series
|
CQ761-CQ769
|
1829B
|
|
HP Photosmart 6520 e-All-in-One
|
CX017A – CX021C
|
1828B
|
|
HP Photosmart 7520 series
|
CZ025A
CZ045A – CZ046A
|
1826A
|
|
HP Photosmart Plus All-in-One B210 series
|
B210
|
1829A
|
|
HP Smart Tank Wireless 450
|
Z4B07A
Z4B56A
|
1737J
1805J
|
Also Read
Apache Software Foundation Releases Important Security Patches for Multiple Apache Tomcat Versions
Google Chrome to Show Not Secure For HTTP Sites and Fix for 42 Security Issues
Ubuntu Security Updates for Vulnerabilities that Affects Multiple Versions
