CVE-2019-6334
Quick assessment
Affected
n/a HP Color LaserJet CM4540 MFP,HP Color LaserJet Managed flow MFP M880zm,HP Color LaserJet Enterprise flow MFP M880z,HP Color LaserJet Enterprise M552,HP Color LaserJet Managed M553,HP Color LaserJet Enterprise M553,HP Color LaserJet Managed M651,HP Color LaserJet Enterprise M651,HP Color LaserJet Enterprise M652,HP Color LaserJet Enterprise M653,HP Color LaserJet Enterprise M750,HP Color LaserJet Managed E75245,HP Color LaserJet Enterprise M751,HP Color LaserJet Enterprise M855,HP Color LaserJet Enterprise Flow MFP M577,HP Color LaserJet Enterprise MFP M577,HP Color LaserJet Enterprise Flow MFP M680,HP Color LaserJet Enterprise MFP M680,HP Color LaserJet Enterprise flow MFP M681,HP Color LaserJet Enterprise MFP M681,HP Color LaserJet Enterprise flow MFP M682,HP Color LaserJet Enterprise MFP M682,HP Color LaserJet Enterprises CP5525,HP Color LaserJet Managed E55040dw,HP Color LaserJet Managed E65050/60,HP Color LaserJet Managed flow MFP E77822/25/30,HP Color LaserJet Managed flow MFP E57540,HP Color LaserJet Managed MFP E57540,HP Color LaserJet Managed flow MFP E67550/60,HP Color LaserJet Managed MFP E67550/60,HP Color LaserJet Managed MFP E77422/28,HP Color LaserJet Managed MFP E77822/25/30,HP Color LaserJet Managed flow MFP E87640/50/60,HP Color LaserJet Managed MFP E87640/50/60,HP Color LaserJet Managed Flow MFP M577,HP Color LaserJet Managed MFP M577,HP Color LaserJet Managed Flow MFP M680,HP Color LaserJet Managed MFP M680,HP LaserJet Enterprise 500 Color M551HP LaserJet Enterprise color flow MFP M575,HP LaserJet Enterprise 500 color MFP M575,HP LaserJet Enterprise Flow MFP M525,HP LaserJet Enterprise 500 MFP M525f,HP LaserJet Enterprise 600 M601,HP LaserJet Enterprise 600 M602,HP LaserJet Enterprise 600 M603,HP Color LaserJet Managed MFP M775,HP LaserJet Enterprise 700 color MFP M775,HP LaserJet Enterprise 700 M712,HP LaserJet Managed flow MFP M630,HP LaserJet Enterprise flow MFP M630,HP LaserJet Managed flow MFP M830,HP LaserJet Enterprise flow MFP M830,HP LaserJet Enterprise M4555 MFP,HP Las ...[truncated*]
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HP Color LaserJet CM4540 MFP CC419A等都是美国惠普（HP）公司的一款多功能打印机。 多款HP产品中存在安全漏洞。攻击者可利用该漏洞执行任意代码。以下产品及版本受到影响：HP Color LaserJet CM4540 MFP CC419A；Color LaserJet CM4540 MFP CC420A；Color LaserJet CM4540 MFP CC421A；Color LaserJet Enterprise M552 B5L23A。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-6334
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential execution of arbitrary code.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款HP产品输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HP Color LaserJet CM4540 MFP CC419A等都是美国惠普（HP）公司的一款多功能打印机。 多款HP产品中存在安全漏洞。攻击者可利用该漏洞执行任意代码。以下产品及版本受到影响：HP Color LaserJet CM4540 MFP CC419A；Color LaserJet CM4540 MFP CC420A；Color LaserJet CM4540 MFP CC421A；Color LaserJet Enterprise M552 B5L23A。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2019-6334
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-6334
请登录查看更多情报信息。
Other References for CVE-2019-6334 (1)
-
https://support.hp.com/us-en/document/c06447795 x_refsource_MISC
Same Patch Batch · n/a · 2019-10-16 · 34 CVEs total
| CVE-2019-17630 | CMS Made Simple 跨站脚本漏洞 | |
| CVE-2019-17662 | ThinVNC 路径遍历漏洞 | |
| CVE-2019-17660 | LimeSurvey 跨站脚本漏洞 | |
| CVE-2019-16522 | WordPress eu-cookie-law插件跨站脚本漏洞 | |
| CVE-2019-16521 | WordPress broken-link-checker插件跨站脚本漏洞 | |
| CVE-2019-16523 | WordPress events-manager插件跨站脚本漏洞 | |
| CVE-2019-16520 | WordPress all-in-one-seo-pack插件跨站脚本漏洞 | |
| CVE-2019-15893 | Sonatype Nexus Repository Manager 安全漏洞 | |
| CVE-2019-17629 | CMS Made Simple 跨站脚本漏洞 | |
| CVE-2019-17578 | Dolibarr ERP/CRM 跨站脚本漏洞 | |
| CVE-2019-17627 | Yale Bluetooth Key application 授权问题漏洞 | |
| CVE-2019-17626 | ReportLab 安全漏洞 | |
| CVE-2019-17625 | Rambox 跨站脚本漏洞 | |
| CVE-2019-17624 | X.Org X Server 缓冲区错误漏洞 | |
| CVE-2016-11014 | NETGEAR JNR1010 代码问题漏洞 | |
| CVE-2016-11015 | NETGEAR JNR1010 跨站请求伪造漏洞 | |
| CVE-2016-11016 | NETGEAR JNR1010 跨站脚本漏洞 | |
| CVE-2019-17611 | HongCMS 跨站脚本漏洞 | |
| CVE-2019-17577 | Dolibarr ERP/CRM 跨站脚本漏洞 | |
| CVE-2019-17576 | Dolibarr ERP/CRM 跨站脚本漏洞 |
Showing top 20 of 34 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2019-6334
No comments yet