1. Home
  2. CVE Database
  3. CVE-2019-6318
CRITICAL · 9.8

CVE-2019-6318

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentia...

Vulnerability Description

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HpColor Laserjet Cm4540 Mfp Firmware< 2309010_581401
HpColor Laserjet Cm4540 Mfp-
HpColor Laserjet Enterprise Cp5525 Firmware< 2309010_581402
HpColor Laserjet Enterprise Cp5525-
HpColor Laserjet Enterprise M553 Firmware< 2309010_581409
HpColor Laserjet Enterprise M553-
HpColor Laserjet Enterprise M552 Firmware< 2309010_581409
HpColor Laserjet Enterprise M552-
HpColor Laserjet Managed M553 Firmware< 2309010_581409
HpColor Laserjet Managed M553-
HpColor Laserjet Enterprise M651 Firmware< 2309010_581418
HpColor Laserjet Enterprise M651-
HpColor Laserjet Managed M651 Firmware< 2309010_581418
HpColor Laserjet Managed M651-
HpColor Laserjet Enterprise M652 Firmware< 2407081_000586
HpColor Laserjet Enterprise M652-
HpColor Laserjet Enterprise M653 Firmware< 2407081_000586
HpColor Laserjet Enterprise M653-
HpColor Laserjet Enterprise M750 Firmware< 2309010_581423
HpColor Laserjet Enterprise M750-

Related Weaknesses (CWE)

CWE-347

References

FAQ

What is CVE-2019-6318?

CVE-2019-6318 is a vulnerability with a CVSS score of 9.8 (CRITICAL). HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentia...

How severe is CVE-2019-6318?

CVE-2019-6318 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2019-6318?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Color Laserjet Cm4540 Mfp Firmware, Hp Color Laserjet Cm4540 Mfp, Hp Color Laserjet Enterprise Cp5525 Firmware, Hp Color Laserjet Enterprise Cp5525, Hp Color Laserjet Enterprise M553 Firmware.