PT-2021-20492 · Xerox+2 · Xerox Printers+2

Published 2021-05-20 · Updated 2021-08-08 · CVE-2021-3438

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: HP LaserJet products (affected versions not specified) Samsung product printers (affected versions not specified)

Description: A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege. Millions of HP, Samsung, and Xerox printers worldwide are vulnerable to this issue.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2021-3438

Affected Products

Hp Laserjet

Samsung Product Printers

Xerox Printers

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2021-3438 · Security Note
• https://support.hp.com/us-en/document/ish_3900395-3833905-16 · Vendor Advisory
• https://t.me/defcon_news/81343 · Telegram Post
• https://t.me/cvenotify/15876 · Telegram Post
• https://t.me/cybersecuritytechnologies/3882 · Telegram Post
• https://t.me/pentestingnews/7988 · Telegram Post
• https://t.me/defcon_news/82005 · Telegram Post
• https://t.me/rnetsec/15339 · Telegram Post
• https://t.me/thehackernews/1384 · Telegram Post
• https://t.me/rnetsec/15413 · Telegram Post
• https://t.me/cybersecuritytechnologies/3969 · Telegram Post
• https://t.me/sysadm_in_channel/3238 · Telegram Post
• https://t.me/cybersecuritytechnologies/4016 · Telegram Post
• https://t.me/pentestingnews/8852 · Telegram Post
• https://t.me/true_secator/1928 · Telegram Post