« Volver al listado

CVE-2021-39237

Estado: ModificadaMedia (4.6)—

Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

HP — Futuresmart 3HP — Futuresmart 4HP — Futuresmart 5

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-39237",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.6,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "HP LaserJet; HP LaserJet Managed; HP PageWide; HP PageWide Managed printers",
          "versions": [
            {
              "status": "affected",
              "version": "FS3: before 3.9.8"
            },
            {
              "status": "affected",
              "version": "FS4: before 4.11.2.1"
            },
            {
              "status": "affected",
              "version": "FS: before 5.3"
            },
            {
              "status": "affected",
              "version": "FS5: before 5.3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-11-03T01:15:07.700",
  "references": [
    {
      "url": "https://support.hp.com/us-en/document/ish_5000124-5000148-16",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "https://support.hp.com/us-en/document/ish_5000124-5000148-16",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure."
    },
    {
      "lang": "es",
      "value": "Determinadas impresoras HP LaserJet, HP LaserJet Managed, HP PageWide y HP PageWide Managed pueden ser vulnerables a una posible divulgación de información"
    }
  ],
  "lastModified": "2026-06-17T04:03:22.557",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:futuresmart_3:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C5EB02E-B15A-484B-BF80-E60D6EDBE172",
              "versionEndExcluding": "3.9.8"
            },
            {
              "criteria": "cpe:2.3:o:hp:futuresmart_4:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5B29112-4F11-4D38-B635-3CAF021AD3C5",
              "versionEndExcluding": "4.11.2.1"
            },
            {
              "criteria": "cpe:2.3:o:hp:futuresmart_5:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D57D4FE-A12E-42B6-8E10-D7B5E60675DF",
              "versionEndExcluding": "5.3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}