Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2019-6332

Quick assessment

Affected
HP Inc. HP DeskJet 2600 All-in-One Printer series
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

HP Inkjet printers是美国惠普（HP）公司的一款Inkjet系列打印机。 多款HP Inkjet printers打印机中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品及版本受到影响：HP DeskJet 2600 All-in-One Printer 4UJ28B；DeskJet 2600 All-in-One Printer V1N01A至V1N08A；DeskJet 2600 All-in-One Printer Y5H6

AI Predicted 6.1 Difficulty: Easy EPSS 0.65% · P48
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2019-6332

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting (XSS). Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A; HP DeskJet Ink Advantage 2600 All-in-One Printer series model numbers V1N02A - V1N02B, Y5Z00A - Y5Z04B; HP DeskJet Ink Advantage 5000 All-in-One Printer series model numbers M2U86A - M2U89B; HP DeskJet Ink Advantage 5200 All-in-One Printer series model numbers M2U76A - M2U78B; HP ENVY 5000 All-in-One Printer series model numbers M2U85A - M2U85B, M2U91A - M2U94B, Z4A54A - Z4A74A; HP ENVY Photo 6200 All-in-One Printer series model numbers K7G18A-K7G26B, K7S21B, Y0K13D - Y0K15A; HP ENVY Photo 7100 All-in-One Printer series model numbers 3XD89A, K7G93A-K7G99A, Z3M37A - Z3M52A; HP ENVY Photo 7800 All-in-One Printer series model numbers K7R96A, K7S00A - K7S10D, Y0G42D - Y0G52B; HP Ink Tank Wireless 410 series model numbers Z4B53A - Z4B55A, Z6Z95A - Z6Z99A, 4DX94A - 4DX95A, 4YF79A, Z7A01A; HP OfficeJet 5200 All-in-One Printer series model numbers M2U75A, M2U81A-M2U84B, Z4B12A - Z4B14A, Z4B27A - Z4B29A; HP Smart Tank Wireless 450 series model numbers Z4B56A, Z6Z96A - Z6Z98A.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款HP Inkjet printers打印机跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HP Inkjet printers是美国惠普（HP）公司的一款Inkjet系列打印机。 多款HP Inkjet printers打印机中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品及版本受到影响：HP DeskJet 2600 All-in-One Printer 4UJ28B；DeskJet 2600 All-in-One Printer V1N01A至V1N08A；DeskJet 2600 All-in-One Printer Y5H6
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
HP Inc. HP DeskJet 2600 All-in-One Printer series 4UJ28B -
HP Inc. HP DeskJet Ink Advantage 2600 All-in-One Printer series V1N02A - V1N02B -
HP Inc. HP DeskJet Ink Advantage 5000 All-in-One Printer series M2U86A - M2U89B -
HP Inc. HP DeskJet Ink Advantage 5200 All-in-One Printer series M2U76A - M2U78B -
HP Inc. HP ENVY 5000 All-in-One Printer series M2U85A - M2U85B -
HP Inc. HP ENVY Photo 6200 All-in-One Printer series K7G18A-K7G26B -
HP Inc. HP ENVY Photo 7100 All-in-One Printer series 3XD89A -
HP Inc. HP ENVY Photo 7800 All-in-One Printer series K7R96A -
HP Inc. HP Ink Tank Wireless 410 series Z4B53A - Z4B55A -
HP Inc. HP OfficeJet 5200 All-in-One Printer series M2U75A -
HP Inc. HP Smart Tank Wireless 450 series Z4B56A -

II. Public POCs for CVE-2019-6332

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-6332

请登录查看更多情报信息。

Other References for CVE-2019-6332 (1)

Same Patch Batch · HP Inc. · 2020-01-09 · 3 CVEs total

CVE-2019-6320 HP DeskJet 3630 跨站请求伪造漏洞
CVE-2019-6319 多款HP DeskJet 3630产品跨站请求伪造漏洞

IV. Related Vulnerabilities

Same vendor: HP Inc.

V. Comments for CVE-2019-6332

No comments yet

Leave a comment