hp-support-head-portlet

Åtgärder
Läser in...
HP:s kundsupport - kunskapsdatabas

hp-contact-secondary-navigation-portlet

Åtgärder
Läser in...

hp-share-print-widget-portlet

Åtgärder
Läser in...
  • Information
    Lär dig hur du uppgraderar till Windows 11

    Handbok för uppgradering till Windows 11

  • Respons

hp-concentra-wrapper-portlet

Åtgärder
Läser in...

SUPPORT COMMUNICATION- SECURITY BULLETIN

Dokument-ID: c04451722

Version: 3

HPSBPI03107 rev.3 - Certain HP LaserJet Printers, MFPs and Certain HP OfficeJet Enterprise Printers using OpenSSL, Remote Unauthorized Access

Notice:: The information in this security bulletin should be acted upon as soon as possible.

Utgivningsdatum : 18-Sep-2014

Last updated : 12-Jul-2017

Potential Security Impact:
Remote Unauthorized access

SÅRBARHETS-SUMMERING
A potential security vulnerability has been identified with certain HP LaserJet Printers, MFPs and certain HP OfficeJet Enterprise Printers using OpenSSL. The vulnerability could be exploited remotely to allow remote unauthorized access.
Note: This OpenSSL vulnerability was detected in specific OpenSSL versions. OpenSSL is a 3rd party product that is embedded with some HP printer products. This bulletin notifies HP Printer customers about impacted products.
Referensnummer
  • CVE-2014-0224 (SSRT101702)
PROGRAMVARUVERSIONER SOM STÖDS*: ENDAST berörda versioner är listade.
Please refer to the RESOLUTION below for a list of impacted products.
BAKGRUND
CVSS 2.0 Base Metrics
Reference
Base Vector
Base Score
CVE-2014-0224
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
6.8
Information on CVSS is documented in HP Customer Notice: HPSN-2008-002
LÖSNING
HP has provided firmware updates for impacted printers as set forth in the table below. To obtain the updated firmware, go to the HP Software and Drivers page for your product and find the firmware update from the list of available software.
Firmware Updates Table
Product Name
Model Number
Firmware Revision
Product Name
Model
Firmware Update Version
HP Color LaserJet CM4540 MFP
CC419A, CC420A, CC421A
v 2302963_436067 (or higher)
HP Color LaserJet CP5525
CE707A,CE708A,CE709A
v 2302963_436070 (or higher)
HP Color LaserJet Enterprise M750
D3L08A, D3L09A, D3L10A
v 2302963_436077 (or higher)
HP Color LaserJet M651
CZ255A, CZ256A, CZ257A, CZ258A
v 2302963_436073 (or higher)
HP Color LaserJet M680
CZ248A, CZ249A
v 2302963_436072 (or higher)
HP Color LaserJet Flow M680
CZ250A, CA251A
v 2302963_436072 (or higher)
HP LaserJet Enterprise 500 color MFP M575dn
CD644A, CD645A
v 2302963_436081 (or higher)
HP LaserJet Enterprise 500 MFP M525f
CF116A, CF117A
v 2302963_436069 (or higher)
HP LaserJet Enterprise 600 M601 Series
CE989A, CE990A
v 2302963_436082 (or higher)
HP LaserJet Enterprise 600 M602 Series
CE991A, CE992A, CE993A
v 2302963_436082 (or higher)
HP LaserJet Enterprise 600 M603 Series
CE994A, CE995A, CE996A
v 2302963_436082 (or higher)
HP LaserJet Enterprise MFP M630 series
B3G84A, B3G85A, B3G86A, J7X28A
v 2303714_233000041 (or higher)
HP LaserJet Enterprise 700 color M775 series
CC522A, CC523A, CC524A, CF304A
v 2302963_436079 (or higher)
HP LaserJet Enterprise 700 M712 series
CF235A, CF236A, CF238A
v 2302963_436080 (or higher)
HP LaserJet Enterprise 800 color M855
A2W77A, A2W78A, A2W79A
v 2302963_436076 (or higher)
HP LaserJet Enterprise 800 color MFP M880
A2W76A, A2W75A, D7P70A, D7P71A
v 2302963_436068 (or higher)
HP LaserJet Enterprise Color 500 M551 Series
CF081A,CF082A,CF083A
v 2302963_436083 (or higher)
HP LaserJet Enterprise color flow MFP M575c
CD646A
v 2302963_436081 (or higher)
HP LaserJet Enterprise flow M830z MFP
CF367A
v 2302963_436071 (or higher)
HP LaserJet Enterprise flow MFP M525c
CF118A
v 2302963_436069 (or higher)
HP LaserJet Enterprise M4555 MFP
CE502A,CE503A, CE504A, CE738A
v 2302963_436064 (or higher)
HP LaserJet Enterprise M806
CZ244A, CZ245A
v 2302963_436075 (or higher)
HP LaserJet Enterprise MFP M725
CF066A, CF067A, CF068A, CF069A
v 2302963_436078 (or higher)
HP Scanjet Enterprise 8500 Document Capture Workstation
L2717A, L2719A
v 2302963_436065 (or higher)
OfficeJet Enterprise Color MFP X585
B5L04A, B5L05A,B5L07A
v 2302963_436066 (or higher)
OfficeJet Enterprise Color X555
C2S11A, C2S12A
v 2302963_436074 (or higher)
HP Color LaserJet CP3525
CC468A, CC469A, CC470A, CC471A
v 06.183.1 (or higher)
HP LaserJet M4345 Multifunction Printer
CB425A, CB426A, CB427A, CB428A
v 48.306.1 (or higher)
HP LaserJet M5025 Multifunction Printer
Q7840A
v 48.306.1 (or higher)
HP Color LaserJet CM6040 Multifunction Printer
Q3938A, Q3939A
v 52.256.1 (or higher)
HP Color LaserJet Enterprise CP4525
CC493A, CC494A, CC495A
v 07.164.1 (or higher)
HP Color LaserJet Enterprise CP4025
CC489A, CC490A
v 07.164.1 (or higher)
HP LaserJet M5035 Multifunction Printer
Q7829A, Q7830A, Q7831A
v 48.306.1 (or higher)
HP LaserJet M9050 Multifunction Printer
CC395A
v 51.256.1 (or higher)
HP LaserJet M9040 Multifunction Printer
CC394A
v 51.256.1 (or higher)
HP Color LaserJet CM4730 Multifunction Printer
CB480A, CB481A, CB482A, CB483A
v 50.286.1 (or higher)
HP LaserJet M3035 Multifunction Printer
CB414A, CB415A, CC476A, CC477A
v 48.306.1 (or higher)
HP 9250c Digital Sender
CB472A
v 48.293.1 (or higher)
HP LaserJet Enterprise P3015
CE525A,CE526A,CE527A,CE528A,CE595A
v 07.186.1 (or higher) 
HP LaserJet M3027 Multifunction Printer
CB416A, CC479A
v 48.306.1 (or higher)
HP LaserJet CM3530 Multifunction Printer
CC519A, CC520A
v 53.236.1 (or higher)
HP Color LaserJet CP6015
Q3931A, Q3932A, Q3933A, Q3934A, Q3935A
v 04.203.1 (or higher)
HP LaserJet P4515
CB514A,CB515A, CB516A, CB517A
v 04.213.1 (or higher)
HP Color LaserJet CM6030 Multifunction Printer
CE664A, CE665A
v 52.256.1 (or higher)
HP LaserJet P4015
CB509A, CB526A, CB511A, CB510A
v 04.213.1 (or higher)
HP LaserJet P4014
CB507A, CB506A, CB512A
v 04.213.1 (or higher)
HP Color LaserJet 4700 Printer series
Q7493A, Q7494A, Q7492A, Q7495A, CB433A, Q7491A, CB432A
v 46.230.6 (or higher)
HP LaserJet 4250 Printer series
Q5401A, Q5400A, Q5402A, Q5403A, Q5404A
v 08.250.2 (or higher)
HP LaserJet 4240 Printer series
Q7784A
v 08.250.2 (or higher)
HP LaserJet 4350 Printer series
Q5410A, Q5407A, Q5408A, Q5406A,Q5409A
v 08.250.2 (or higher)
HP LaserJet P3005 Printer series
Q7813A, Q7814A, Q7816A, Q7815A, Q7812A
v 02.190.3 (or higher)
HP LaserJet 5200 Printer series
Q7547A, Q7543A, Q7552A, Q7546A, Q7544A, Q7545A
v 08.241.0 (or higher)
HP LaserJet 4345 Multifunction Printer series
Q3943A, Q3942A, Q3944A, Q3945A
v 09.310.2 (or higher)
HP Color LaserJet CP3505 Printer series
CB443A, CE491A, CB442A, CB444A
v 03.160.2 (or higher)
HP Color LaserJet 3800 Printer series
Q5984A, Q5983A, Q5982A, Q5981A
v 46.080.8 (or higher)
HP Color LaserJet CP4005 Printer series
CB504A, CB503A
v 46.230.6 (or higher)
HP Color LaserJet 3000 Printer series
Q7534A, Q7536A, Q7533A, Q7535A
v 46.080.2 (or higher)
HP Digital Sender 9200c
Q5916A
v 09.271.3 (or higher)
HP LaserJet 9040/9050 Printer Series
Q3722A, Q3721A, Q3723A, Q7699A, Q7697A, Q7698A
v 08.260.3 (or higher)
HP LaserJet 9040/9050 Multifunction Printer Series
Q3726A, Q3728A
v 08.290.2 (or higher)
HP Color LaserJet 4000 Multifunction Printer series
Q7520A, Q7518A, Q7519A, Q7517A, CB483A, CB480A, CB482A, CB481A
v 46.380.3 (or higher)
HP Jetdirect 620n EIO Card
J7934G
v 29.26 (or higher)
HP Jetdirect ew2500 802.11b/g Wireless Print Server
J8021A
v 41.16 (or higher)
HP Jetdirect 690n EIO Card
J8007A
v 41.16 (or higher)
HP Jetdirect 635n EIO Card
J7961G
v 41.16 (or higher)
HP Jetdirect 640n EIO Card
J8025A
v 45.35 (or higher)
HP Jetdirect 695n EIO Card
J8024A
v 41.16 (or higher)
HP LaserJet P2055 Printer series
CE456A, CE457A, CE459A, CE460A
v 20141201 (or higher)
HP LaserJet Pro 200 color Printer M251n/nw
CF146A, CF147A
v 20140919 (or higher)
HP LaserJet Pro 400 MFP M425dn/dw
CF286A, CF288A
v 20140919 (or higher)
HP LaserJet Pro 200 color MFP M276n/nw
CF144A, CF145A
v 20140919 (or higher)
HP LaserJet Pro 400 M401a/d/dn/dnw/dw/n
CF270A, CF274A, CF278A,CF399A, CF285A, CZ195A
v 20150212 (or higher)
...
Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, visit http://www.hp.com/go/contacthp to learn about your HP support options.
Report: To report a potential security vulnerability with any HP supported product, send email to: hp-security-alert@hp.com.
Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via email, visit https://h41369.www4.hp.com/alerts-signup.php?lang=en&cc=US&jumpid=hpsc_profile.
Security Bulletin Archive: To view released Security Bulletins, search the HP Support Site for "security bulletin".
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
PI
HP Printing and Imaging
HF
HP Hardware and Firmware
GN
HP General Software
It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.
To get the security-alert PGP key, please send an e-mail message as follows:
Subject: get key
System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.

"HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin.HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action.HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin.To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement."
REVISIONSHISTORIK : Version:1 (rev.1) - 22 September 2014 Initial release; Version:2 (rev.2) - 05 March 2015 Initial release; Version:3 (rev.3) - 12 July 2017 Fixed broken link and shortened firmware install process.

HP Inc. shall not be liable for technical or editorial errors or omissions contained herein.The information provided is provided "as is" without warranty of any kind.To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration.The information in this document is subject to change without notice.HP Inc. and the names of HP products referenced herein are trademarks of HP Inc. in the United States and other countries.Other product and company names mentioned herein may be trademarks of their respective owners.

hp-feedback-input-portlet

Åtgärder
Läser in...

hp-feedback-banner-portlet

Åtgärder
Läser in...

hp-country-locator-portlet

Åtgärder
Läser in...
Land/region: Flag Sverige

hp-detect-load-my-device-portlet

Åtgärder
Läser in...