Vulnerability Description
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hp | Laserjet Managed Mfp E62665 3Gy14A Firmware | - |
| Hp | Laserjet Managed Mfp E62665 3Gy14A | - |
| Hp | Laserjet Managed Mfp E62665 3Gy15A Firmware | - |
| Hp | Laserjet Managed Mfp E62665 3Gy15A | - |
| Hp | Laserjet Managed Mfp E62665 3Gy16A Firmware | - |
| Hp | Laserjet Managed Mfp E62665 3Gy16A | - |
| Hp | Laserjet Managed Mfp E62665 3Gy17A Firmware | - |
| Hp | Laserjet Managed Mfp E62665 3Gy17A | - |
| Hp | Laserjet Managed Mfp E62665 3Gy18A Firmware | - |
| Hp | Laserjet Managed Mfp E62665 3Gy18A | - |
| Hp | Color Laserjet Enterprise Flow Mfp 5800Zf 49K96Av Firmware | - |
| Hp | Color Laserjet Enterprise Flow Mfp 5800Zf 49K96Av | - |
| Hp | Color Laserjet Enterprise Flow Mfp 5800Zf 58R10A Firmware | - |
| Hp | Color Laserjet Enterprise Flow Mfp 5800Zf 58R10A | - |
| Hp | Color Laserjet Enterprise Flow Mfp 5800Zf 6Qn29A Firmware | - |
| Hp | Color Laserjet Enterprise Flow Mfp 5800Zf 6Qn29A | - |
| Hp | Color Laserjet Enterprise Flow Mfp 5800Zf 6Qn30A Firmware | - |
| Hp | Color Laserjet Enterprise Flow Mfp 5800Zf 6Qn30A | - |
| Hp | Color Laserjet Enterprise Flow Mfp 5800Zf 6Qn31A Firmware | - |
| Hp | Color Laserjet Enterprise Flow Mfp 5800Zf 6Qn31A | - |
Related Weaknesses (CWE)
References
- https://support.hp.com/us-en/document/ish_8585737-8585769-16/hpsbpi03849Vendor Advisory
- https://support.hp.com/us-en/document/ish_8585737-8585769-16/hpsbpi03849Vendor Advisory
FAQ
What is CVE-2023-1329?
CVE-2023-1329 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath...
How severe is CVE-2023-1329?
CVE-2023-1329 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-1329?
Check the references section above for vendor advisories and patch information. Affected products include: Hp Laserjet Managed Mfp E62665 3Gy14A Firmware, Hp Laserjet Managed Mfp E62665 3Gy14A, Hp Laserjet Managed Mfp E62665 3Gy15A Firmware, Hp Laserjet Managed Mfp E62665 3Gy15A, Hp Laserjet Managed Mfp E62665 3Gy16A Firmware.