« Volver al listado

CVE-2019-18916

Estado: ModificadaAlta (7.8)—

A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printers) which may lead to unauthorized elevation of privilege on the client.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

HP — Color Laserjet PRO MFP M277 B3q10a FirmwareHP — Color Laserjet PRO MFP M277 B3q10v FirmwareHP — Color Laserjet PRO MFP M277 B3q11a FirmwareHP — Color Laserjet PRO MFP M277 B3q11v FirmwareHP — Color Laserjet PRO MFP M277 B3q17a Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-18916",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "HP Color LaserJet Pro MFP M277 printers",
          "versions": [
            {
              "status": "affected",
              "version": "before 14.0.15344.534"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-11-09T14:15:11.347",
  "references": [
    {
      "url": "https://support.hp.com/us-en/document/c06586963",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "https://support.hp.com/us-en/document/c06586963",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printers) which may lead to unauthorized elevation of privilege on the client."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una posible vulnerabilidad de seguridad en HP LaserJet Solution Software (para determinadas impresoras HP LaserJet) que puede conllevar a una elevación de privilegios no autorizada en el cliente"
    }
  ],
  "lastModified": "2026-06-17T02:25:34.733",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:color_laserjet_pro_mfp_m277_b3q11a_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82FC7FC9-0816-4430-B7B1-9CAF4866D62C",
              "versionStartIncluding": "14.0.15344.534"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_pro_mfp_m277_b3q11a:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "510B5D4F-2004-4BC2-9CF1-967E140778F5"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:color_laserjet_pro_mfp_m277_b3q11v_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCE3ACB0-61F3-448A-B8B4-B54C48988654",
              "versionStartIncluding": "14.0.15344.534"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_pro_mfp_m277_b3q11v:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D429B595-00C4-4BDC-93D8-908160BF407E"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:color_laserjet_pro_mfp_m277_b3q10a_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4662DA79-4BD8-45BB-A56C-CE20A4E4C2E7",
              "versionStartIncluding": "14.0.15344.534"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_pro_mfp_m277_b3q10a:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6EF697DD-F468-4A18-8F77-C4461236ED6C"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:color_laserjet_pro_mfp_m277_b3q10v_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9885E047-E53E-42F1-B61C-3D9E58D29D8C",
              "versionStartIncluding": "14.0.15344.534"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_pro_mfp_m277_b3q10v:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DE70A542-7699-413A-B61A-34EAE042C819"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:color_laserjet_pro_mfp_m277_b3q17a_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6C77A1A-55B7-4218-8CFA-889755EE7B02",
              "versionStartIncluding": "14.0.15344.534"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:color_laserjet_pro_mfp_m277_b3q17a:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BC95F829-AB27-4EAA-81C3-DB3D40428A16"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}