hp-support-head-portlet

Actions
Loading...
HP Customer Support - Knowledge Base

hp-contact-secondary-navigation-portlet

Actions
Loading...

hp-share-print-widget-portlet

Actions
Loading...
  • Information
    Need Windows 11 help?

    Check documents and videos on compatibility, FAQs, upgrade information and available fixes. Windows 11 Support Center

  • Feedback

hp-concentra-wrapper-portlet

Actions
Loading...

Certain HP Print Products – Potential information disclosure, denial of service, remote code execution

Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.

Severity

Critical

HP Reference

HPSBPI03781 rev. 7

Release date

March 21, 2022

Last updated

June 21, 2022

Category

Print

Potential Security Impact

Information disclosure, denial of service, buffer overflow

Relevant Common Vulnerabilities and Exposures (CVE) List

Reported by: Alexander Bolshev (@dark_k3y), Timo Hirvonen (@TimoHirvonen), and Dmitry Janushkevich (@InfoSecDJ) working with Trend Micro Zero Day Initiative

List of CVE IDs

CVE ID

CVSS

Severity

Vector

CVE-2022-24291

7.5

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2022-24292

9.8

Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2022-24293

9.8

Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Learn more about CVSS 3.0 base metrics, which range from 0 to 10.

PSR-2021-0179

Resolution

Update your printer firmware.

HP has provided firmware updates for potentially affected products listed in the table below. To obtain the updated firmware listed below, go to the HP Software and Driver Downloads, and then search for your printer model.

Affected products

Find the products affected and the firmware version that resolves the vulnerabilities.

Affected products

Identify the affected products in the tables below.

HP LaserJet, LaserJet Pro printers

Product Name

Product Number

Updated Firmware Version

HP Color LaserJet MFP M478-M479 series

W1A75A, W1A76A, W1A77A, W1A81A, W1A82A, W1A79A, W1A80A, W1A78A

002_2208A or higher

HP Color LaserJet Pro M153-M154 Printer series

T6B46A, T6B47A, T6B50A, T6B49A, T6B48A, T6B51A, T6B54A, T6B55A, T6B53A, T6B52A

20220414 or higher

HP Color LaserJet Pro M155-M156 Printer series

7KW48A, 7KW49A, 7KW50A, 7KW51A

20220411 or higher

HP Color LaserJet Pro M252

B4A22A, B4A21A

20220414 or higher

HP Color Laserjet Pro M253-M254 series

T6B56A, T6B58A, T6B57A, T6B62A, T6B63A, T6B61A, T6B65A, T6B60A, T6B64A, T6B59A

20220414 or higher

HP Color LaserJet Pro M255-M256 Printer series

7KW65A, 7KW64A, 7KW63A, 7KW68A, 7KW67A, 7KW66A

20220411 or higher

HP Color LaserJet Pro M452

CF389A, CF389V, CF394A, CF394V, CF388A, CF388V

20220414 or higher

HP Color LaserJet Pro M453-M454 series

W1Y40A, W1Y41A, W1Y46A, W1Y47A, W1Y44A, W1Y45A, W1Y43A

002_2208A or higher

HP Color LaserJet Pro MFP M180-M181 Printer series

T6B73A, T6B70A, T6B74A, T6B75A, T6B72A, T6B71A

20220414 or higher

HP Color LaserJet Pro MFP M182-M185 series

7KW54A, 7KW55A, 7KW56A, 7KW57A, 7KW59A, 7KW58A

20220411 or higher

HP Color LaserJet Pro MFP M274, M277 Series

M6D61A, B3Q17A, B3Q11A, B3Q10A

20220414 or higher

HP Color LaserJet Pro MFP M280-M281 Printer series

T6B85A, T6B84A, T6B80A, T6B83A, T6B86A, T6B81A, T6B82A

20220414 or higher

HP Color LaserJet Pro MFP M282-M285 series

7KW72A, 7KW73A, 7KW74A, 7KW75A, 7KW76A, 7KW77A, 7KW78A, 7KW79A

20220411 or higher

HP Color LaserJet Pro MFP M377, M477 Series

M5H23A, CF378A, CF379A, CF377A

20220414 or higher

HP LaserJet M101-M106 Printer series

G3Q34A, G3Q35A, G3Q36A, G3Q37A, G3Q39A

20220414 or higher

HP LaserJet M118-M119 Printer series

4PA39A

20211215 or higher

HP LaserJet M203-M206 Printer series

G3Q50A, G3Q46A, G3Q47A, G3Q48A

20220414 or higher

HP LaserJet MFP M129-M134 series

G3Q57A, G3Q59A, G3Q60A, G3Q58A, G3Q61A, G3Q63A, G3Q64A, G3Q65A, G3Q62A, G3Q68A, G3Q66A, G3Q67A

20220414 or higher

HP LaserJet MFP M227-M230 series

G3Q78A, G3Q79A, Q3Q75A, G3Q74A, G3Q77A, G3Q76A

20220414 or higher

HP LaserJet Pro 500 color MFP M570

CZ271A, CZ272A

20220414 or higher

HP LaserJet Pro M201 series

CF466A, CF456A, CF455A

20220414 or higher

HP LaserJet Pro M202 series

CF467A, C6N21A, C6N20A

20220414 or higher

HP LaserJet Pro M225, M226

CF484A, CF485A, CF486A, CF497A, C6N22A, C6N23A

20220520 or higher

HP LaserJet Pro M304-M305 Printer series

W1A66A, W1A46A, W1A47A, W1A48A

002_2208A or higher

HP LaserJet Pro M402-M403 series

C5F94A, G3V21A, C5J91A, C5F96A, C5F93A, F6J43A, F6J41A, C5F92A, C5F95A, F6J42A, F6J44A, G3V21A

20220414 or higher

HP LaserJet Pro M404-M405 Printer series

W1A51A, W1A53A, W1A56A, W1A63A, W1A52A, 93M22A, W1A58A, W1A59A, W1A60A, W1A57A

002_2208A or higher

HP LaserJet Pro M435

A3E42A

20220414 or higher

HP LaserJet Pro M501

J8H61A, J8H60A

20220414 or higher

HP LaserJet Pro M701, M706 Series

B6S00A, B6S01A, B6S02A, K9G90A, K9G91A

20220414 or higher

HP LaserJet Pro MFP M148-M149 Printer series

4PA41A, 4PA42A, 4PA43A, 4PA44A

20220414 or higher

HP LaserJet Pro MFP M426-M427 f series

F6W14A, F6W17A, F6W15A, F6W18A, C5F98A, C5F99A

20220414 or higher

HP LaserJet Pro MFP M426-M427 series

F6W13A, F6W16A, 1GP80A, F6W19A, C5F97A

20220414 or higher

HP LaserJet Pro MFP M428-M429 f series

W1A28A, W1A31A, W1A33A

002_2208A or higher

HP LaserJet Pro MFP M428-M429 series

W1A29A, W1A32A, W1A30A, W1A38A, W1A34A, W1A35A

002_2208A or higher

HP LaserJet Pro MFP M521 series

A8P79A, A8P80A

20220414 or higher

HP PageWide Pro printers

Product Name

Product Number

Updated Firmware Version

HP PageWide 352dw Printer

J6U57A

2205D or higher

HP PageWide 377dw Multifunction Printer

J9V80A

2205D or higher

HP PageWide Managed P55250dw Printer series

J6U55A, J6U51B, J6U55B

2205D or higher

HP PageWide Managed P57750dw Multifunction Printer

J9V82A

2205D or higher

HP PageWide Pro 452dn Printer series

D3Q15A

2205D or higher

HP PageWide Pro 452dw Printer series

D3Q16A

2205D or higher2205D or higher

HP PageWide Pro 477dn Multifunction Printer series

D3Q19A

2205D or higher

HP PageWide Pro 477dw Multifunction Printer series

D3Q20A

2205D or higher

HP PageWide Pro 552dw Printer series

D3Q17A

2205D or higher

HP PageWide Pro 577 Multifunction Printer series

D3Q21A, K9Z76A

2205D or higher

HP OfficeJet printers

Product Name

Product Number

Updated Firmware Version

HP OfficeJet Pro 8210 Printer series

D9L63A, D9L64A, J3P65A, J3P66A, J3P67A, J3P68A

001.2210B or higher

HP OfficeJet Pro 8216 Printer series

T0G70A

001.2210B or higher

HP OfficeJet Pro 8730 All-in-One Printer

D9L20A, K7S32A

001.2207C or higher

HP OfficeJet Pro 8740 All-in-One Printer series

D9L21A, K7S42A, T0G65A, K7S39A, J6X83A, K7S43A, K7S40A, K7S41A

001.2207C or higher

Revision history

This document has been revised according to the information below.

List of versions

Version

Description

Date

7

Updated product chart

June 21, 2022

6

Updated product chart

June 1, 2022

5

Updated product chart

May 3, 2022

4

Updated product chart

April 22, 2022

3

Updated product chart

March 30, 2022

2

Update Acknowledgment (Reported by) section

March 25, 2022

1

Initial Release

March 21, 2022

Additional information

Follow these links for additional information.

Third-party security patches

Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.

Support

For issues about implementing the recommendations of this Security Bulletin, visit http://www.hp.com/go/contacthp to learn about your HP support options.

Report

To report a potential security vulnerability with any HP supported product, send email to: hp-security-alert@hp.com.

Subscribe

To initiate a subscription to receive future HP Security Bulletin alerts via email, visit https://h41369.www4.hp.com/alerts-signup.php?lang=en&cc=US&jumpid=hpsc_profile.

Security bulletin archive

To view released Security Bulletins, visit https://support.hp.com/security-bulletins.

It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.

Download HP’s security-alert PGP key

Legal information

System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.

HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Security Bulletin. HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action. HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Security Bulletin. To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement.

© Copyright 2022 HP Development Company, L.P.

HP Inc. (HP) shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP nor its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. "HP Inc.," "HP" and the names of HP products referenced herein are trademarks of HP Inc. or its affiliates in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.


hp-feedback-input-portlet

Actions
Loading...

hp-feedback-banner-portlet

Actions
Loading...

hp-country-locator-portlet

Actions
Loading...
Country/Region: Flag Romania

hp-detect-load-my-device-portlet

Actions
Loading...