{"id":23767,"date":"2022-03-23T23:52:21","date_gmt":"2022-03-23T22:52:21","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=23767"},"modified":"2022-06-23T21:03:14","modified_gmt":"2022-06-23T19:03:14","slug":"hunderte-hp-druckermodelle-mit-rce-sicherheitslcke-mrz-2022","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2022\/03\/23\/hunderte-hp-druckermodelle-mit-rce-sicherheitslcke-mrz-2022\/","title":{"rendered":"Hundreds of HP printer models with RCE vulnerability (March 2022)"},"content":{"rendered":"

\"Sicherheit[German<\/a>]HP warns in two security advisories about remote code execution (RCE) and information disclosure vulnerabilities in hundreds of its printer models. Attackers could exploit the vulnerability to inject malicious code into systems. However, the manufacturer has provided firmware updates to mitigate this vulnerabilites.<\/p>\n

<\/p>\n

\"\"In the security advisories HPSBPI03780<\/a> and HPSBPI03781<\/a>, dated 21 March 2022, HP notes that certain HP printer models may be vulnerable to remote code execution (RCE) and buffer overflows. The two security alerts address critical vulnerabilities affecting hundreds of LaserJet Pro, Pagewide Pro, OfficeJet, Enterprise, Large Format and DeskJet printer models.<\/p>\n

Security alert HPSBPI03780<\/a> mentions only vulnerability CVE-2022-3942 reported by Trend Micro. HP advises that certain HP Print and Digital Sending products may be vulnerable to remote code execution (RCE) and buffer overflows when using Link-Local Multicast Name Resolution (LLMNR). Details of CVE-2022-3942 are not disclosed – however, due to buffer overflow and remote code execution, the vulnerability has received a CVE score of 8.4, which HP itself rates as critical.<\/p>\n

he second security advisory, HPSBPI03781<\/a>, escribes three other vulnerabilities reported by Trend Micro. Certain HP printing devices may be vulnerable to information disclosure, denial of service or remote code execution.<\/p>\n