PT-2018-1451 · Hewlett Packard · Hp Amp+9

Published 2018-08-01 · Updated 2018-10-15 · CVE-2018-5925

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Inkjet printers (affected versions not specified) HP PageWide, DesignJet, AMP, Deskjet, Envy, Ink Tank, Officejet, Photosmart, Smart Tank (affected versions not specified)

Description A security issue has been identified that could allow remote code execution through a static buffer overflow. This can be triggered by sending a maliciously crafted file to an affected device, potentially enabling an attacker to execute arbitrary code.

Recommendations For HP Inkjet printers, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For HP PageWide, DesignJet, AMP, Deskjet, Envy, Ink Tank, Officejet, Photosmart, Smart Tank, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2018-01001

CVE-2018-5925

Affected Products

Hp Amp

Hp Designjet

Hp Deskjet

Hp Envy

Hp Ink Tank

Hp Inkjet Printers

Hp Officejet

Hp Pagewide

Hp Photosmart

Hp Smart Tank

References · 7

• 🔥 https://research.checkpoint.com/sending-fax-back-to-the-dark-ages · Exploit
• https://support.hp.com/us-en/document/c06097712 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-5925 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01001 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-5925 · Security Note
• http://securityfocus.com/bid/105010 · Note
• http://securitytracker.com/id/1041415 · Note