Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow
Certain HP DeskJet All in One devices
may be vulnerable to remote code execution caused by a buffer overflow when
specially crafted Web Services for Devices (WSD) scan requests are improperly
validated and handled by the MFP.
WSD
Scan is a Microsoft Windows–based network scanning protocol that allows a PC to
discover scanners (and MFPs) on a network and send scan jobs to them without
requiring vendor specific drivers or utilities.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
HP DeskJet 2800e All-in-One Printer series
Vendor
HP Inc
Product
HP DeskJet 2800e All-in-One Printer series
Platforms
Unknown
Default status
unaffected
HP DeskJet 2800e All-in-One Printer series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
<2612A
Unavailable
None listed
HP DeskJet 4200 All-in-One Printer series
Vendor
HP Inc
Product
HP DeskJet 4200 All-in-One Printer series
Platforms
Unknown
Default status
unaffected
HP DeskJet 4200 All-in-One Printer series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
<2612A
Unavailable
None listed
HP DeskJet Ink Advantage 4200 All-in-One Printer series
Vendor
HP Inc
Product
HP DeskJet Ink Advantage 4200 All-in-One Printer series
Platforms
Unknown
Default status
unaffected
HP DeskJet Ink Advantage 4200 All-in-One Printer series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
<2612A
Unavailable
None listed
HP DeskJet 4200e All-in-One Printer series
Vendor
HP Inc
Product
HP DeskJet 4200e All-in-One Printer series
Platforms
Unknown
Default status
unaffected
HP DeskJet 4200e All-in-One Printer series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
<2612A
Unavailable
None listed
HP DeskJet Ink Advantage Ultra 4900 series
Vendor
HP Inc
Product
HP DeskJet Ink Advantage Ultra 4900 series
Platforms
Unknown
Default status
unaffected
HP DeskJet Ink Advantage Ultra 4900 series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
<2612A
Unavailable
None listed
HP DeskJet Ink Advantage 2800 All-in-One Printer series
Vendor
HP Inc
Product
HP DeskJet Ink Advantage 2800 All-in-One Printer series
Platforms
Unknown
Default status
unaffected
HP DeskJet Ink Advantage 2800 All-in-One Printer series · Scoped product and version facts