Vulnerability · Published Nov 22, 2022 · Assigned by hp
CVE-2021-3942
Critical 9.8
In plain English
A critical-severity memory corruption in HP Print products and Digital Sending products from HP Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 75% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.6%top 24.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HP Inc. | HP Print products and Digital Sending products | See HP Security Bulletin reference for affected versions. |
Weakness: CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H