Vulnerability · Published Nov 3, 2021 · Assigned by hp
CVE-2021-39238
Critical 9.8
In plain English
A critical-severity security flaw in HP Enterprise LaserJet; HP LaserJet Managed; HP Enterprise PageWide; HP PageWide Managed printers. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 11.2% (higher than 96% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)11.2%top 4.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HP Enterprise LaserJet; HP LaserJet Managed; HP Enterprise PageWide; HP PageWide Managed printers | FS3: before 3.9.8FS4: before 4.11.2.1FS: before 5.3FS5: before 5.3 |
References
- https://support.hp.com/us-en/document/ish_5000383-5000409-16 x_refsource_MISC