CVE-2023-35175
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk76th percentile - higher than 76% of all known CVEs
Summary
Certain HP LaserJet Pro print products are potentially vulnerable to Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
Risk Assessment
Exploitation of this vulnerability could lead to remote control of the device or privilege escalation, posing a serious security threat to the organization.
Recommendation
It is recommended to update the firmware of HP LaserJet Pro devices and implement appropriate security measures to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.