BDU:2024-02826

Опубликовано: 12 июн. 2023

Источник: fstec

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Уязвимость микропрограммного обеспечения многофункциональных принтеров HP связана с возможностью записи за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код при запуске решений HP Workpath

Вендор

HP Inc.

Наименование ПО

HP Color LaserJet Enterprise Flow MFP M577

HP Color LaserJet Enterprise MFP M577

HP Color LaserJet Managed Flow MFP M577

HP Color LaserJet Managed MFP M577

HP Color LaserJet Enterprise Flow MFP M578

HP Color LaserJet Enterprise MFP M578

HP Color LaserJet Enterprise flow MFP M681

HP Color LaserJet Enterprise MFP M681

HP Color LaserJet Enterprise flow MFP M682

HP Color LaserJet Enterprise MFP M682

HP Color LaserJet Enterprise Flow MFP M776

HP Color LaserJet Enterprise MFP M776

HP Color LaserJet Managed flow MFP E57540

HP Color LaserJet Managed MFP E57540

HP Color LaserJet Managed MFP E785dn

HP Color LaserJet Managed MFP E78523

HP Color LaserJet Managed MFP E78528

HP Color LaserJet Enterprise MFP X57945

HP Color LaserJet Enterprise Flow MFP X57945

HP Color LaserJet Enterprise Flow MFP 6800 series

HP Color LaserJet Enterprise MFP 6800 series

HP Color LaserJet Enterprise Flow MFP 5800 series

HP ScanJet Enterprise flow N9120 fn2 Document Scanner

HP Digital Sender flow 8500 fn2 Document Capture Workstation

HP PageWide Managed Color MFP P77940

HP PageWide Managed Color MFP P77950

HP PageWide Managed Color MFP P77960

HP PageWide Managed Color MFP E77650

HP PageWide Managed Color Flow MFP E77650z

HP PageWide Managed Color flow MFP E77660z

HP PageWide Managed Color MFP E58650dn

HP PageWide Managed Color flow MFP E58650z

HP PageWide Enterprise Color MFP 780

HP PageWide Enterprise Color Flow MFP 780f

HP PageWide Enterprise Color Flow MFP 785

HP PageWide Color MFP 779

HP PageWide Color MFP 774

HP PageWide Enterprise Color MFP 586

HP PageWide Enterprise Color flow MFP 586z

HP LaserJet Managed MFP E826dn

HP LaserJet Managed Flow MFP E826z

HP LaserJet Managed E82650

HP LaserJet Managed E82660

HP LaserJet Managed E82670

HP LaserJet Managed MFP E82540

HP LaserJet Managed MFP E82550

HP LaserJet Managed MFP E82560

HP LaserJet Managed Flow MFP E82540

HP LaserJet Managed Flow MFP E82550

HP LaserJet Managed Flow MFP E82560

HP LaserJet Managed MFP E731

HP LaserJet Managed Flow MFP M731

HP LaserJet Managed Flow MFP E73130

HP LaserJet Managed MFP E73130

HP LaserJet Managed Flow MFP E73135

HP LaserJet Managed MFP E73135

HP LaserJet Managed Flow MFP E73140

HP LaserJet Managed MFP E73140

HP LaserJet Managed MFP E730

HP LaserJet Managed MFP E73025

HP LaserJet Managed MFP E73030

HP LaserJet Managed MFP E72525

HP LaserJet Managed MFP E72535

HP LaserJet Managed MFP E72530

HP LaserJet Managed Flow MFP E72525

HP LaserJet Managed Flow MFP E72530

HP LaserJet Managed Flow MFP E72535

HP LaserJet Managed MFP E72425

HP LaserJet Managed MFP E72430

HP LaserJet Managed Flow MFP E62675

HP LaserJet Managed MFP E62655

HP LaserJet Managed MFP E62665

HP LaserJet Managed MFP E62555

HP LaserJet Managed MFP E62565

HP LaserJet Managed Flow MFP E62555

HP LaserJet Managed Flow MFP E62565

HP LaserJet Managed Flow MFP E62575

HP LaserJet Managed MFP E52645

HP LaserJet Managed MFP E52545

HP LaserJet Managed flow MFP E52545c

HP LaserJet Enterprise Flow MFP M636

HP LaserJet Enterprise MFP M636

HP LaserJet Enterprise Flow MFP M635

HP LaserJet Enterprise MFP M635

HP LaserJet Enterprise Flow MFP M634

HP LaserJet Enterprise MFP M634

HP LaserJet Enterprise flow MFP M633

HP LaserJet Enterprise MFP M633

HP LaserJet Enterprise flow MFP M632

HP LaserJet Enterprise MFP M632

HP LaserJet Enterprise flow MFP M631

HP LaserJet Enterprise MFP M631

HP LaserJet Enterprise MFP M528

HP LaserJet Managed MFP M527

HP LaserJet Managed Flow MFP M527z

HP Color LaserJet Managed MFP E877

HP LaserJet Enterprise MFP M527

HP LaserJet Enterprise Flow MFP M527z

HP Color LaserJet Managed Flow E87740

HP Color LaserJet Managed Flow E87750

HP Color LaserJet Managed Flow E87760

HP Color LaserJet Managed Flow E87770

HP Color LaserJet Managed MFP E87740

HP Color LaserJet Managed MFP E87750

HP Color LaserJet Managed MFP E87760

HP Color LaserJet Managed MFP E87770

HP Color LaserJet Managed MFP E87640du-E87660du

HP Color LaserJet Managed MFP E87640

HP Color LaserJet Managed MFP E87650

HP Color LaserJet Managed MFP E87660

HP Color LaserJet Managed Flow MFP E87640

HP Color LaserJet Managed Flow MFP E87650

HP Color LaserJet Managed Flow MFP E87660

HP Color LaserJet Managed MFP E78323

HP Color LaserJet Managed MFP E78330

HP Color LaserJet Managed MFP E78223

HP Color LaserJet Managed MFP E78224

HP Color LaserJet Managed MFP E78225

HP Color LaserJet Managed MFP E78226

HP Color LaserJet Managed MFP E78227

HP Color LaserJet Managed MFP E78228

HP Color LaserJet Managed MFP E77822

HP Color LaserJet Managed MFP E77825

HP Color LaserJet Managed MFP E77830

HP Color LaserJet Managed Flow MFP E77822

HP Color LaserJet Managed Flow MFP E77825

HP Color LaserJet Managed Flow MFP E77830

HP Color LaserJet Managed MFP E77422

HP Color LaserJet Managed MFP E77423

HP Color LaserJet Managed MFP E77424

HP Color LaserJet Managed MFP E77425

HP Color LaserJet Managed MFP E77426

HP Color LaserJet Managed MFP E77427

HP Color LaserJet Managed MFP E77428

HP Color LaserJet Managed MFP E67650

HP Color LaserJet Managed MFP E67660

HP Color LaserJet Managed Flow MFP E67550

HP Color LaserJet Managed MFP E67550

HP Color LaserJet Managed Flow MFP E67560

HP Color LaserJet Managed MFP E67560

Версия ПО

- (HP Color LaserJet Enterprise Flow MFP M577)

- (HP Color LaserJet Enterprise MFP M577)

- (HP Color LaserJet Managed Flow MFP M577)

- (HP Color LaserJet Managed MFP M577)

- (HP Color LaserJet Enterprise Flow MFP M578)

- (HP Color LaserJet Enterprise MFP M578)

- (HP Color LaserJet Enterprise flow MFP M681)

- (HP Color LaserJet Enterprise MFP M681)

- (HP Color LaserJet Enterprise flow MFP M682)

- (HP Color LaserJet Enterprise MFP M682)

- (HP Color LaserJet Enterprise Flow MFP M776)

- (HP Color LaserJet Enterprise MFP M776)

- (HP Color LaserJet Managed flow MFP E57540)

- (HP Color LaserJet Managed MFP E57540)

- (HP Color LaserJet Managed MFP E785dn)

- (HP Color LaserJet Managed MFP E78523)

- (HP Color LaserJet Managed MFP E78528)

- (HP Color LaserJet Enterprise MFP X57945)

- (HP Color LaserJet Enterprise Flow MFP X57945)

- (HP Color LaserJet Enterprise Flow MFP 6800 series)

- (HP Color LaserJet Enterprise MFP 6800 series)

- (HP Color LaserJet Enterprise Flow MFP 5800 series)

- (HP ScanJet Enterprise flow N9120 fn2 Document Scanner)

- (HP Digital Sender flow 8500 fn2 Document Capture Workstation)

- (HP PageWide Managed Color MFP P77940)

- (HP PageWide Managed Color MFP P77950)

- (HP PageWide Managed Color MFP P77960)

- (HP PageWide Managed Color MFP E77650)

- (HP PageWide Managed Color Flow MFP E77650z)

- (HP PageWide Managed Color flow MFP E77660z)

- (HP PageWide Managed Color MFP E58650dn)

- (HP PageWide Managed Color flow MFP E58650z)

- (HP PageWide Enterprise Color MFP 780)

- (HP PageWide Enterprise Color Flow MFP 780f)

- (HP PageWide Enterprise Color Flow MFP 785)

- (HP PageWide Color MFP 779)

- (HP PageWide Color MFP 774)

- (HP PageWide Enterprise Color MFP 586)

- (HP PageWide Enterprise Color flow MFP 586z)

- (HP LaserJet Managed MFP E826dn)

- (HP LaserJet Managed Flow MFP E826z)

- (HP LaserJet Managed E82650)

- (HP LaserJet Managed E82660)

- (HP LaserJet Managed E82670)

- (HP LaserJet Managed MFP E82540)

- (HP LaserJet Managed MFP E82550)

- (HP LaserJet Managed MFP E82560)

- (HP LaserJet Managed Flow MFP E82540)

- (HP LaserJet Managed Flow MFP E82550)

- (HP LaserJet Managed Flow MFP E82560)

- (HP LaserJet Managed MFP E731)

- (HP LaserJet Managed Flow MFP M731)

- (HP LaserJet Managed Flow MFP E73130)

- (HP LaserJet Managed MFP E73130)

- (HP LaserJet Managed Flow MFP E73135)

- (HP LaserJet Managed MFP E73135)

- (HP LaserJet Managed Flow MFP E73140)

- (HP LaserJet Managed MFP E73140)

- (HP LaserJet Managed MFP E730)

- (HP LaserJet Managed MFP E73025)

- (HP LaserJet Managed MFP E73030)

- (HP LaserJet Managed MFP E72525)

- (HP LaserJet Managed MFP E72535)

- (HP LaserJet Managed MFP E72530)

- (HP LaserJet Managed Flow MFP E72525)

- (HP LaserJet Managed Flow MFP E72530)

- (HP LaserJet Managed Flow MFP E72535)

- (HP LaserJet Managed MFP E72425)

- (HP LaserJet Managed MFP E72430)

- (HP LaserJet Managed Flow MFP E62675)

- (HP LaserJet Managed MFP E62655)

- (HP LaserJet Managed MFP E62665)

- (HP LaserJet Managed MFP E62555)

- (HP LaserJet Managed MFP E62565)

- (HP LaserJet Managed Flow MFP E62555)

- (HP LaserJet Managed Flow MFP E62565)

- (HP LaserJet Managed Flow MFP E62575)

- (HP LaserJet Managed MFP E52645)

- (HP LaserJet Managed MFP E52545)

- (HP LaserJet Managed flow MFP E52545c)

- (HP LaserJet Enterprise Flow MFP M636)

- (HP LaserJet Enterprise MFP M636)

- (HP LaserJet Enterprise Flow MFP M635)

- (HP LaserJet Enterprise MFP M635)

- (HP LaserJet Enterprise Flow MFP M634)

- (HP LaserJet Enterprise MFP M634)

- (HP LaserJet Enterprise flow MFP M633)

- (HP LaserJet Enterprise MFP M633)

- (HP LaserJet Enterprise flow MFP M632)

- (HP LaserJet Enterprise MFP M632)

- (HP LaserJet Enterprise flow MFP M631)

- (HP LaserJet Enterprise MFP M631)

- (HP LaserJet Enterprise MFP M528)

- (HP LaserJet Managed MFP M527)

- (HP LaserJet Managed Flow MFP M527z)

- (HP Color LaserJet Managed MFP E877)

- (HP LaserJet Enterprise MFP M527)

- (HP LaserJet Enterprise Flow MFP M527z)

- (HP Color LaserJet Managed Flow E87740)

- (HP Color LaserJet Managed Flow E87750)

- (HP Color LaserJet Managed Flow E87760)

- (HP Color LaserJet Managed Flow E87770)

- (HP Color LaserJet Managed MFP E87740)

- (HP Color LaserJet Managed MFP E87750)

- (HP Color LaserJet Managed MFP E87760)

- (HP Color LaserJet Managed MFP E87770)

- (HP Color LaserJet Managed MFP E87640du-E87660du)

- (HP Color LaserJet Managed MFP E87640)

- (HP Color LaserJet Managed MFP E87650)

- (HP Color LaserJet Managed MFP E87660)

- (HP Color LaserJet Managed Flow MFP E87640)

- (HP Color LaserJet Managed Flow MFP E87650)

- (HP Color LaserJet Managed Flow MFP E87660)

- (HP Color LaserJet Managed MFP E78323)

- (HP Color LaserJet Managed MFP E78330)

- (HP Color LaserJet Managed MFP E78223)

- (HP Color LaserJet Managed MFP E78224)

- (HP Color LaserJet Managed MFP E78225)

- (HP Color LaserJet Managed MFP E78226)

- (HP Color LaserJet Managed MFP E78227)

- (HP Color LaserJet Managed MFP E78228)

- (HP Color LaserJet Managed MFP E77822)

- (HP Color LaserJet Managed MFP E77825)

- (HP Color LaserJet Managed MFP E77830)

- (HP Color LaserJet Managed Flow MFP E77822)

- (HP Color LaserJet Managed Flow MFP E77825)

- (HP Color LaserJet Managed Flow MFP E77830)

- (HP Color LaserJet Managed MFP E77422)

- (HP Color LaserJet Managed MFP E77423)

- (HP Color LaserJet Managed MFP E77424)

- (HP Color LaserJet Managed MFP E77425)

- (HP Color LaserJet Managed MFP E77426)

- (HP Color LaserJet Managed MFP E77427)

- (HP Color LaserJet Managed MFP E77428)

- (HP Color LaserJet Managed MFP E67650)

- (HP Color LaserJet Managed MFP E67660)

- (HP Color LaserJet Managed Flow MFP E67550)

- (HP Color LaserJet Managed MFP E67550)

- (HP Color LaserJet Managed Flow MFP E67560)

- (HP Color LaserJet Managed MFP E67560)

Тип ПО

Микропрограммный код

ПО программно-аппаратного средства

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Критический уровень опасности (базовая оценка CVSS 2.0 составляет 10)

Критический уровень опасности (базовая оценка CVSS 3.0 составляет 9,8)

Возможные меры по устранению уязвимости

Установка обновлений из доверенных источников.

В связи со сложившейся обстановкой и введенными санкциями против Российской Федерации рекомендуется устанавливать обновления программного обеспечения только после оценки всех сопутствующих рисков.

Компенсирующие меры:

- ограничение доступа к устройствам из внешних сетей (Интернет);

- использование антивирусных средств для обнаружения средств эксплуатации уязвимости.

Использование рекомендаций:

https://support.hp.com/us-en/document/ish_8585737-8585769-16/hpsbpi03849

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1329
CVE

EPSS

Процентиль: 86%

0.03025

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Связанные уязвимости

CVE-2023-1329

CVSS3: 9.8

nvd

больше 2 лет назад

A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products.

GHSA-822g-9c37-42c6

CVSS3: 9.8

github

больше 2 лет назад

EPSS

Процентиль: 86%

0.03025

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2