CVE-2023-27972

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution

Critical · published April 28, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
74.1
In the wild
Unconfirmed
What it is

🔥 A buffer overflow vulnerability in certain HP LaserJet Pro printers could let attackers run their own code with a simple print job! Think of it like a delivery service that accepts packages without checking the contents — a rogue delivery could introduce anything into your system. These printers are opening the door wide for unwanted guests! An attacker could gain full control over the device, leading to potentially devastating consequences like leaking sensitive data or spreading malware across the network. This isn't just a printer issue; it could compromise your entire printing infrastructure!

Put simply

Think of it like a delivery service that accepts packages without checking the contents — a rogue delivery could introduce anything into your system. These printers are opening the door wide for unwanted guests! This vulnerability allows a buffer overflow, enabling remote code execution through crafted print jobs sent to the printer, effectively bypassing the usual security measures. It's a sneaky way for unauthorized code to run without user intervention!

What to do

An attacker could gain full control over the device, leading to potentially devastating consequences like leaking sensitive data or spreading malware across the network. This isn't just a printer issue; it could compromise your entire printing infrastructure! Update your affected HP LaserJet Pro printers to the latest firmware immediately to close this critical vulnerability. Additionally, consider implementing network segmentation to reduce the risk of exploitation. Regularly audit your printer settings and monitor for unusual activity! You've got this! With a quick update, your printers will be back in action and secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01499 · 74.1th percentile
Published
2023-04-28T15:59Z
EPSS history
Timeline
  • 28 APR 15:59Z
    Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution
    cvelistv5