Vulnerability Description
Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hp | Designjet T920 Cr355A Firmware | mry_07_07_04.1 |
| Hp | Designjet T920 Cr355A | - |
| Hp | Designjet T920 Cr355B Firmware | mry_07_07_04.1 |
| Hp | Designjet T920 Cr355B | - |
| Hp | Designjet T920 Cr354A Firmware | mry_07_07_04.1 |
| Hp | Designjet T920 Cr354A | - |
| Hp | Designjet T930 L2Y22A Firmware | mry_07_07_04.1 |
| Hp | Designjet T930 L2Y22A | - |
| Hp | Designjet T930 L2Y22B Firmware | mry_07_07_04.1 |
| Hp | Designjet T930 L2Y22B | - |
| Hp | Designjet T930 L2Y21A Firmware | mry_07_07_04.1 |
| Hp | Designjet T930 L2Y21A | - |
| Hp | Designjet T930 L2Y21B Firmware | mry_07_07_04.1 |
| Hp | Designjet T930 L2Y21B | - |
| Hp | Designjet T1530 L2Y24A Firmware | mry_07_07_04.1 |
| Hp | Designjet T1530 L2Y24A | - |
| Hp | Designjet T1530 L2Y24B Firmware | mry_07_07_04.1 |
| Hp | Designjet T1530 L2Y24B | - |
| Hp | Designjet T1530 L2Y23A Firmware | mry_07_07_04.1 |
| Hp | Designjet T1530 L2Y23A | - |
Related Weaknesses (CWE)
References
- https://support.hp.com/us-en/document/ish_5268198-5268230-16Vendor Advisory
- https://support.hp.com/us-en/document/ish_5268198-5268230-16Vendor Advisory
FAQ
What is CVE-2021-3965?
CVE-2021-3965 is a vulnerability with a CVSS score of 7.5 (HIGH). Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.
How severe is CVE-2021-3965?
CVE-2021-3965 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-3965?
Check the references section above for vendor advisories and patch information. Affected products include: Hp Designjet T920 Cr355A Firmware, Hp Designjet T920 Cr355A, Hp Designjet T920 Cr355B Firmware, Hp Designjet T920 Cr355B, Hp Designjet T920 Cr354A Firmware.