CVE-2022-24292

CVSS V2 High 10 CVSS V3 Critical 9.8
Description
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
Overview
  • CVE ID
  • CVE-2022-24292
  • Assigner
  • hp-security-alert@hp.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-03-23T20:15:10
  • Last Modified Date
  • 2022-03-29T18:50:30
Weakness Enumerations
CWE URL
NVD-CWE-noinfo http://cwe.mitre.org/data/definitions/NVD-noinfo.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y40a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y40a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y41a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y41a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y46a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y46a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y47a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y47a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y44a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y44a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y45a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y45a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y43a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y43a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a75a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a75a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a76a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a76a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a77a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a77a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a81a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a81a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a82a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a82a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a79a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a79a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a80a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a80a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a78a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a78a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a66a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a66a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a46a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a46a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a47a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a47a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a47a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a47a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a48a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a48a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a51a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a51a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a53a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a53a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a56a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a56a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a63a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a63a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a52a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a52a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a58a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a58a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a59a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a59a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a60a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a60a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a57a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a57a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_m404-m405_93m22a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_m404-m405_93m22a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a28a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a28a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a31a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a31a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a33a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a33a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a29a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a29a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a32a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a32a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a30a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a30a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a38a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a38a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a34a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a34a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a35a_firmware:*:*:*:*:*:*:*:* 1 OR 002_2208a
cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a35a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_352dw_j6u57a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_352dw_j6u57a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_377dw_j9v80a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_377dw_j9v80a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_managed_p55250dw_j6u55a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_managed_p55250dw_j6u55a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_managed_p55250dw_j6u51b_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_managed_p55250dw_j6u51b:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_managed_p55250dw_j6u55b_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_managed_p55250dw_j6u55b:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_managed_p57750dw_j9v82a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_managed_p57750dw_j9v82a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_pro_452dn_d3q15a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_pro_452dn_d3q15a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_pro_452dw_d3q16a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_pro_452dw_d3q16a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_pro_477dn_d3q19a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_pro_477dn_d3q19a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_pro_477dw_d3q20a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_pro_477dw_d3q20a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_pro_552dw_d3q17a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_pro_552dw_d3q17a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_pro_577dw_d3q21a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_pro_577dw_d3q21a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:pagewide_pro_577z_k9z76a_firmware:*:*:*:*:*:*:*:* 1 OR 2205d
cpe:2.3:h:hp:pagewide_pro_577z_k9z76a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8210_d9l63a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2210b
cpe:2.3:h:hp:officejet_pro_8210_d9l63a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8210_d9l64a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2210b
cpe:2.3:h:hp:officejet_pro_8210_d9l64a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8210_j3p65a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2210b
cpe:2.3:h:hp:officejet_pro_8210_j3p65a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8210_j3p66a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2210b
cpe:2.3:h:hp:officejet_pro_8210_j3p66a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8210_j3p67a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2210b
cpe:2.3:h:hp:officejet_pro_8210_j3p67a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8210_j3p68a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2210b
cpe:2.3:h:hp:officejet_pro_8210_j3p68a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8216_t0g70a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2210b
cpe:2.3:h:hp:officejet_pro_8216_t0g70a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8730_d9l20a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2207c
cpe:2.3:h:hp:officejet_pro_8730_d9l20a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8730_k7s32a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2207c
cpe:2.3:h:hp:officejet_pro_8730_k7s32a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8740_d9l21a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2207c
cpe:2.3:h:hp:officejet_pro_8740_d9l21a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8740_k7s42a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2207c
cpe:2.3:h:hp:officejet_pro_8740_k7s42a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8740_t0g65a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2207c
cpe:2.3:h:hp:officejet_pro_8740_t0g65a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8740_k7s39a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2207c
cpe:2.3:h:hp:officejet_pro_8740_k7s39a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8740_j6x83a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2207c
cpe:2.3:h:hp:officejet_pro_8740_j6x83a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8740_k7s43a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2207c
cpe:2.3:h:hp:officejet_pro_8740_k7s43a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8740_k7s40a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2207c
cpe:2.3:h:hp:officejet_pro_8740_k7s40a:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hp:officejet_pro_8740_k7s41a_firmware:*:*:*:*:*:*:*:* 1 OR 001.2207c
cpe:2.3:h:hp:officejet_pro_8740_k7s41a:-:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 10
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 10
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • HIGH
  • Base Score
  • 9.8
  • Base Severity
  • CRITICAL
  • Exploitability Score
  • 3.9
  • Impact Score
  • 5.9
References
Reference URL Reference Tags
https://support.hp.com/us-en/document/ish_5950417-5950443-16 Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-24292
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24292
History
Created Old Value New Value Data Type Notes
2022-04-04 00:40:48 Added to TrackCVE
2022-12-06 13:09:25 2022-03-23T20:15Z 2022-03-23T20:15:10 CVE Published Date updated
2022-12-06 13:09:25 2022-03-29T18:50:30 CVE Modified Date updated
2022-12-06 13:09:25 Analyzed Vulnerability Status updated