Vulnerability Description
A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hp | T8X44 Firmware | 1828a |
| Hp | T8X44 | - |
| Hp | 3Aw51A Firmware | 1828a |
| Hp | 3Aw51A | - |
| Hp | A9U28B Firmware | 1828b |
| Hp | A9U28B | - |
| Hp | D3A82A Firmware | 1828b |
| Hp | D3A82A | - |
| Hp | V1N08A Firmware | 1828a |
| Hp | V1N08A | - |
| Hp | Y5H80A Firmware | 1828a |
| Hp | Y5H80A | - |
| Hp | D4H24B Firmware | 1826a |
| Hp | D4H24B | - |
| Hp | F5S57A Firmware | 1829a |
| Hp | F5S57A | - |
| Hp | K4T99B Firmware | 1829a |
| Hp | K4T99B | - |
| Hp | K4U04B Firmware | 1829a |
| Hp | K4U04B | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/105010Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1041415Third Party AdvisoryVDB Entry
- https://research.checkpoint.com/sending-fax-back-to-the-dark-ages/ExploitIssue TrackingThird Party Advisory
- https://support.hp.com/us-en/document/c06097712Vendor Advisory
- http://www.securityfocus.com/bid/105010Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1041415Third Party AdvisoryVDB Entry
- https://research.checkpoint.com/sending-fax-back-to-the-dark-ages/ExploitIssue TrackingThird Party Advisory
- https://support.hp.com/us-en/document/c06097712Vendor Advisory
FAQ
What is CVE-2018-5925?
CVE-2018-5925 is a vulnerability with a CVSS score of 7.8 (HIGH). A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code ex...
How severe is CVE-2018-5925?
CVE-2018-5925 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-5925?
Check the references section above for vendor advisories and patch information. Affected products include: Hp T8X44 Firmware, Hp T8X44, Hp 3Aw51A Firmware, Hp 3Aw51A, Hp A9U28B Firmware.