PT-2023-15905 · Samsung+1 · Samsung Printer+1

Published 2023-08-16 · Updated 2023-08-23 · CVE-2022-4894

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HP Printer software (affected versions not specified) Samsung Printer software (affected versions not specified)

Description The issue is related to an elevation of privilege due to an Uncontrolled Search Path Element in certain HP and Samsung Printer software packages.

Recommendations For HP Printer software, at the moment, there is no information about a newer version that contains a fix for this issue. For Samsung Printer software, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2022-4894

Affected Products

Hp Sprinter

Samsung Printer

References · 4

• https://support.hp.com/us-en/document/ish_8947379-8947403-16/hpsbpi03857 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4894 · Security Note
• https://t.me/cibsecurity/68693 · Telegram Post
• https://twitter.com/CVEnew/status/1691908893482336341 · Twitter Post