PT-2019-2857 · Hewlett Packard · Hp Deskjet 3630

Published 2019-04-23 · Updated 2020-01-22 · CVE-2019-6319

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher)

Description The issue is related to a Cross-Site Request Forgery (CSRF) that could allow a remote attacker to cause a denial of service or device misconfiguration.

Recommendations For HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A with firmware version SWP1FN1912BR or higher, consider restricting access to the device until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2019-02822

CVE-2019-6319

Affected Products

Hp Deskjet 3630

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6319 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6319 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02822 · Security Note
• https://support.hp.com/us-en/document/c06308143 · Vendor Advisory