PT-2019-3152 · Hewlett Packard · Hp Deskjet 3630

Published 2019-04-23 · Updated 2020-01-22 · CVE-2019-6320

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A HP DeskJet 3630 All-in-One Printers models K4T93A - K4T99C HP DeskJet 3630 All-in-One Printers models K4U00B - K4U03B HP DeskJet 3630 All-in-One Printers models V3F21A - V3F22A with firmware version SWP1FN1912BR or higher

Description The issue is related to a Cross-Site Request Forgery (CSRF) that could lead to a denial of service (DOS) or device misconfiguration. An attacker could exploit this issue to cause service disruptions or misconfigure the device.

Recommendations For HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, consider disabling remote access until a patch is available. For HP DeskJet 3630 All-in-One Printers models K4T93A - K4T99C, restrict access to the device's configuration interface to minimize the risk of exploitation. For HP DeskJet 3630 All-in-One Printers models K4U00B - K4U03B, avoid using the device for critical tasks until the issue is resolved. For HP DeskJet 3630 All-in-One Printers models V3F21A - V3F22A with firmware version SWP1FN1912BR or higher, apply configuration changes to limit the device's exposure to the vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2019-03140

CVE-2019-6320

Affected Products

Hp Deskjet 3630

References · 4

• https://osv.dev/vulnerability/CVE-2019-6320 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6320 · Security Note
• https://support.hp.com/us-en/document/c06308143 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03140 · Security Note