Vulnerability · Published Nov 9, 2021 · Assigned by hp
CVE-2020-28419
High 8.8
In plain English
A high-severity security flaw in HP LaserJet Printer; HP LaserJet Pro Printer; HP PageWide Printer; HP PageWide Pro Printer; HP inkjet Printer; HP OfficeJet Printer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 83% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)2.3%top 16.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
During installation with certain driver software or application packages an arbitrary code execution could occur.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HP LaserJet Printer; HP LaserJet Pro Printer; HP PageWide Printer; HP PageWide Pro Printer; HP inkjet Printer; HP OfficeJet Printer | before 61.111.01.9108before 8.0.13284.929before 11.0.19232.882before 52.1.4899before 14.0.19241.351before 14.0.19232.485before 10.0.16007.5before 9.0.15316.203 |
References
- https://support.hp.com/us-en/document/c07058567 x_refsource_MISC