CVE-2023-35176
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.
Risk Assessment
Exploitation of this vulnerability could lead to device crashes or unauthorized access to data, posing a security threat to the organization.
Recommendation
It is recommended to update the device firmware and monitor and restrict access to the embedded web service.
Other vulnerabilities in HP LaserJet Pro print products
See all- CVE-2023-35175Critical
Certain HP LaserJet Pro print products are potentially vulnerable to Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
- CVE-2023-27973Critical
Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.
- CVE-2023-27972Critical
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.
- CVE-2023-27971Critical
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
- CVE-2023-35177High
Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.
Original NVD description (English source)
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.