PT-2020-11205 · Hewlett Packard · Hp Envy Photo 7100+10

Published

2020-01-09

·

Updated

2020-01-21

·

CVE-2019-6332

CVSS v3.1

4.8

Medium

VectorAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions HP DeskJet 2600 All-in-One Printer series versions 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A HP DeskJet Ink Advantage 2600 All-in-One Printer series versions V1N02A - V1N02B, Y5Z00A - Y5Z04B HP DeskJet Ink Advantage 5000 All-in-One Printer series versions M2U86A - M2U89B HP DeskJet Ink Advantage 5200 All-in-One Printer series versions M2U76A - M2U78B HP ENVY 5000 All-in-One Printer series versions M2U85A - M2U85B, M2U91A - M2U94B, Z4A54A - Z4A74A HP ENVY Photo 6200 All-in-One Printer series versions K7G18A-K7G26B, K7S21B, Y0K13D - Y0K15A HP ENVY Photo 7100 All-in-One Printer series versions 3XD89A, K7G93A-K7G99A, Z3M37A - Z3M52A HP ENVY Photo 7800 All-in-One Printer series versions K7R96A, K7S00A - K7S10D, Y0G42D - Y0G52B HP Ink Tank Wireless 410 series versions Z4B53A - Z4B55A, Z6Z95A - Z6Z99A, 4DX94A - 4DX95A, 4YF79A, Z7A01A HP OfficeJet 5200 All-in-One Printer series versions M2U75A, M2U81A-M2U84B, Z4B12A - Z4B14A, Z4B27A - Z4B29A HP Smart Tank Wireless 450 series versions Z4B56A, Z6Z96A - Z6Z98A
Description A potential security issue has been identified with certain HP InkJet printers, which could be exploited to allow cross-site scripting (XSS).
Recommendations For HP DeskJet 2600 All-in-One Printer series, update the firmware to the latest version. For HP DeskJet Ink Advantage 2600 All-in-One Printer series, update the firmware to the latest version. For HP DeskJet Ink Advantage 5000 All-in-One Printer series, update the firmware to the latest version. For HP DeskJet Ink Advantage 5200 All-in-One Printer series, update the firmware to the latest version. For HP ENVY 5000 All-in-One Printer series, update the firmware to the latest version. For HP ENVY Photo 6200 All-in-One Printer series, update the firmware to the latest version. For HP ENVY Photo 7100 All-in-One Printer series, update the firmware to the latest version. For HP ENVY Photo 7800 All-in-One Printer series, update the firmware to the latest version. For HP Ink Tank Wireless 410 series, update the firmware to the latest version. For HP OfficeJet 5200 All-in-One Printer series, update the firmware to the latest version. For HP Smart Tank Wireless 450 series, update the firmware to the latest version.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2019-6332

Affected Products

Hp Deskjet 2600
Hp Deskjet Ink Advantage 2600
Hp Deskjet Ink Advantage 5000
Hp Deskjet Ink Advantage 5200
Hp Envy 5000
Hp Envy Photo 6200
Hp Envy Photo 7100
Hp Envy Photo 7800
Hp Ink Tank Wireless 410
Hp Officejet 5200
Hp Smart Tank Wireless 450