PT-2018-1451 · Hewlett Packard · Hp Amp+9

Publicado 2018-08-01 · Atualizado 2018-10-15 · CVE-2018-5925

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Inkjet printers (affected versions not specified) HP PageWide, DesignJet, AMP, Deskjet, Envy, Ink Tank, Officejet, Photosmart, Smart Tank (affected versions not specified)

Description A security issue has been identified that could allow remote code execution through a static buffer overflow. This can be triggered by sending a maliciously crafted file to an affected device, potentially enabling an attacker to execute arbitrary code.

Recommendations For HP Inkjet printers, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For HP PageWide, DesignJet, AMP, Deskjet, Envy, Ink Tank, Officejet, Photosmart, Smart Tank, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2018-01001

CVE-2018-5925

Produtos afetados

Hp Amp

Hp Designjet

Hp Deskjet

Hp Envy

Hp Ink Tank

Hp Inkjet Printers

Hp Officejet

Hp Pagewide

Hp Photosmart

Hp Smart Tank

Referências · 7

• 🔥 https://research.checkpoint.com/sending-fax-back-to-the-dark-ages · Exploit
• https://support.hp.com/us-en/document/c06097712 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-5925 · Aviso do Fabricante
• http://securityfocus.com/bid/105010 · Nota
• https://bdu.fstec.ru/vul/2018-01001 · Nota de Segurança
• http://securitytracker.com/id/1041415 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-5925 · Nota de Segurança