hp-concentra-wrapper-portlet

Actions

Loading...

SUPPORT COMMUNICATION- SECURITY BULLETIN

Document ID: c06640149

Version: 3

HPSBPI03666 rev. 3 - Certain HP and Samsung-branded Print Products - Network Stack Potential Vulnerabilities

Notice: The information in this security bulletin should be acted upon as soon as possible.

Release date : 16-Jun-2020

Last updated : 31-Jul-2020

Potential Security Impact:

Remote Code Execution, Denial of Service, and Multiple other Potential Vulnerabilities

VULNERABILITY SUMMARY

Multiple potential vulnerabilities may exist in the Treck Inc. networking stack used in certain HP and Samsung-branded printers. These may include, but not be limited to, denial of service or remote code execution. Please refer to Treck Inc. CVE’s below for further descriptions.

Reference Number

CVE-2020-11896, CVE-2020-11898, CVE-2020-11899, CVE-2020-11900, CVE-2020-11901, CVE-2020-11904, CVE-2020-11905, CVE-2020-11906, CVE-2020-11907, CVE-2020-11909, CVE-2020-11910, CVE-2020-11911, CVE-2020-11912, CVE-2020-11914, PSR-2020-0024

SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.

Please refer to the RESOLUTION below for a list of potentially impacted products.

BACKGROUND

For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com

CVSS 3.0 Base Metrics

Reference	Base Vector	Base Score
CVE-2020-11901	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H	9
CVE-2020-11899	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	8.8
CVE-2020-11900	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H	8.2
CVE-2020-11896	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	7.5
CVE-2020-11898	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	7.5
CVE-2020-11904	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L	5.6
CVE-2020-11905	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	5.3
CVE-2020-11906	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L	5
CVE-2020-11907	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L	5
CVE-2020-11909	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	3.7
CVE-2020-11910	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	3.7
CVE-2020-11911	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L	3.7
CVE-2020-11912	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	3.7
CVE-2020-11914	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	3.1

RESOLUTION

HP has provided firmware updates for potentially impacted printers listed in the tables below. To obtain the updated firmware, go to the HP Software site and search for your printer model.

HP Laser, HP LaserJet Pro, HP Neverstop Laser, Samsung proXpress, Samsung MultiXpress

Product Name	Model Number	Firmware Revision
HP Color Laser MFP 178/179	4ZB96A, 4ZB97A, 6HU08A, 6HU09A	V3.82.01.08 or later
HP Color LaserJet Pro M154	T6B51A, T6B52A	20200612 or later
HP Color LaserJet Pro M155	7KW48A, 7KW49A	20200603 or later
HP Color LaserJet Pro M252	B4A21A, B4A22A	20200623 or later
HP Color LaserJet Pro M254	T6B59A, T6B60A, T6B61A	20200612 or later
HP Color LaserJet Pro M255	7KW63A, 7KW64A, 7KW65A	20200603 or later
HP Color LaserJet Pro M452	CF388A, CF389A, CF394A	20200612 or later
HP Coolor LaserJet Pro MFP M176, M177	CF547A, CZ165A	20200531 or later
HP Color LaserJet Pro MFP M180, M181	T6B70A, T6B71A, T6B74A	20200612 or later
HP Color LaserJet Pro MFP M182, M183	7KW54A, 7KW55A, 7KW56A	20200603 or later
HP Color LaserJet Pro MFP M277, M274	B3Q10A, B3Q11A, B3Q17A, M6D61A	20200623 or later
HP Color LaserJet Pro MFP M280, M281	T6B80A, T6B81A, T6B82A, T6B83A	20200612 or later
HP Color LaserJet Pro MFP M282, M283	7KW72A, 7KW73A, 7KW74A, 7KW75A	20200603 or later
HP Color LaserJet Pro MFP M377, M477	CF377A, CF378A, CF379A, M5H23A	20200612 or later
HP Laser MFP 131/133/135/137	4ZB83A, 6HU11A, 4ZB86A, 4ZB87A, 4ZB84A, 6HU12A, 4ZB91A, 4ZB89A, 4ZB90A, 4ZB93A, 9VV52A	V3.82.01.11 or later
HP LaserJet Pro MFP M125, M126, M127, M128	CZ172A, CZ173A, CZ174A, CZ175A, CZ181A, CZ182A, CZ183A, CZ184A, CZ185A, CZ186A	20200531 or later
HP LaserJet MFP M72625-M72630 series	2ZN49A, 2ZN50A	V3.82.11.04 or later
HP LaserJet Multifunction Printer series M1130, M1200	B4K88A, CE841A, CE842A, CE843A, CE844A, CE845A, CE846A, CE847A, CE848A, CE849A, CE850A	20200617 or later
HP LaserJet Pro 400 M401	CF270A, CF274A, CF278A, CF285A, CF399A, CZ195A	20200714 or later
HP LaserJet Pro 400 MFP M425	CF286A, CF288A	20200714 or later
HP LaserJet Pro 500 color MFP M570	CZ271A, CZ272A	20200625 or later
HP LaserJet Pro M102, M104, M106	G3Q34A, G3Q35A, G3Q36A, G3Q37A, G3Q39A	20200605 or later
HP LaserJet Pro M12w	T0L46A	20200617 or later
HP LaserJet Pro M15, M16, M17	W2G50A, W2G51A, W2G52A, W2G53A, Y5S43A	20200609 or later
HP LaserJet Pro M201, M202	C6N20A, C6N21A, CF455A, CF456A	20200619 or later
HP LaserJet Pro M203, M206, M118	4PA39A, G3Q46A, G3Q47A, G3Q48A, G3Q50A	20200605 or later
HP LaserJet Pro M225, M226	C6N22A, C6N23A, CF484A, CF485A, CF486A	20200619 or later
HP LaserJet Pro M402, M403	C5F92A, C5F93A, C5F94A, C5F95A, C5F96A, C5J91A, G3V21A, F6J41A, F6J42A, F6J43A, F6J44A	20200612 or later
HP LaserJet Pro M435	A3E42A	20200707 or later
HP LaserJet Pro M501	J8H60A, J8H61A	20200612 or later
HP LaserJet Pro M521	A8P79A, A8P80A	20200625 or later
HP LaserJet Pro M701, M706	B6S00A, B6S01A, B6S02A	20200707 or later
HP LaserJet Pro MFP M130, M132, M134	G3Q57A, G3Q58A, G3Q59A, G3Q60A, G3Q61A, G3Q62A, G3Q63A, G3Q64A, G3Q65A, G3Q66A, G3Q67A, G3Q68A	20200605 or later
HP LaserJet Pro MFP M26	T0L49A, T0L50A	20200531 or later
HP LaserJet Pro MFP M29, M31	W2G54A, W2G55A, W2G56A, W2G57A, Y5S53A, Y5S50A, Y5S54A, Y5S55A	20200609 or later
HP LaserJet Pro MFP M426 HP LaserJet Pro MFP M427	C5F97A, C5F98A, C5F99A, F6W13A, F6W14A, F6W15A, F6W16A, F6W17A, F6W18A, F6W19A	20200612 or later
HP LaserJet Pro P1102, P1106, P1108	CE651A, CE653A, CE655A, CE657A, CE658A	20200617 or later
HP LaserJet Ultra MFP M230 HP LaserJet Pro MFP M227, M148, M149	4PA41A, 4PA42A, 4PA44A, G3Q74A, G3Q75A, G3Q76A, G3Q77A, G3Q78A, G3Q79A	20200605 or later
HP Neverstop Laser 1000, 1020	4RY22A, 4RY23A, 4YE47A, 4YE48A, 4YE51A, 5HG74A, 5HG80A	20200609 or later
HP Neverstop Laser 1200a, 1005c	4QD21A, 4RY26A, 4YE52A, 4YE53A, 5NL12A	20200609 or later
Samsung MultiXpress SL-K302NR/GOV Samsung MultiXpress SL-K3250NR Samsung MultiXpress SL-K3300NR	SS026B, SS027A, SS027B, SS027C, SS027D, SS027E, SS027F, SS027G, SS027H, SS027J, SS027K, SS027L, SS0028E	V3.00.11.04 or later
Samsung MultiXpress SL-X3220NR Samsung MultiXpress SL-X3280NR	SS043A, SS043B, SS043C, SS043D, SS043E, SS043F, SS043G, SS043H SS043J, SS043K, SS043L, SS043M, SS044G	V3.00.11.08 or later
Samsung Printer proXpress SL-C3510ND Samsung Printer proXpress SL-C3510ND/SLI Samsung Printer proXpress SL-C4010N Samsung Printer proXpress SL-C4010ND Samsung Printer proXpress SL-C4010ND/GOV	SS214A, SS214B, SS215A, SS216A, SS216B, SS216C, SS216D, SS216E, SS216F, SS216G, SS216H, SS216J, SS216K, SS216L, SS216M, SS216N, SS216P, SS216Q, SS216S, SS216T, SS216U, SS216V, SS216Z	V3.00.05.06 or later
Samsung ProXpress SL-C3010 Color Laser Printer series	SS209A, SS210A, SS210B, SS201C, SS210D, SS210E, SS210F, SS210G, SS210H, SS210J, SS210K, SS210L, SS210M, SS210P	V3.00.09.00 or later
Samsung ProXpress SL-C3060FR Color Laser Multifunction Printer	SS211A, SS211B, SS211C, SS211D, SS211E, SS211F, SS211G, SS211H, SS211J, SS211K, SS211L, SS211M, SS211N, SS211P, SS211Q	V3.00.11.00 or later
Samsung ProXpress SL-C3060ND Color Laser Multifunction Printer	SS213A, SS213B, SS213C, SS213D, SS213E, SS213F, SS213G, SS213H	V3.00.11.00 or later
Samsung proXpress SL-M3310ND/GOV Samsung proXpress SL-M3320ND Samsung proXpress SL-M3820D Samsung proXpress SL-M3820DW Samsung proXpress SL-M3820ND Samsung proXpress SL-M3820ND/KRM Samsung proXpress SL-M4020ND Samsung proXpress SL-M4020ND/GOV Samsung proXpress SL-M4021ND Samsung proXpress SL-M4021ND/GOV	SS364B, SS365H, SS371A, SS371B, SS371C, SS371D, SS372C, SS375B, SS373A, SS373B, SS373C, SS373D, SS373E, SS373F, SS373G, SS373H, SS373J, SS373K, SS373L, SS373M, SS373N, SS373P, SS373Q, SS373S, SS373T, SS373U, SS373V, SS373W, SS373Z, SS383K, SS383L, SS383X, SS383Y, SS383C	V4.00.02.20 or later
Samsung proXpress SL-M3370FD Samsung proXpress SL-M3375FD Samsung proXpress SL-M3870FW/KRM Samsung proXpress SL-M4070FR/GOV	SS368A, SS368B, SS368C, SS368D, SS368E, SS368F, SSE68G, SS368H, SS368J, SS369A, SS369B, SS369C, SS369D, SS369E, SS378E, SS389J, SS390C	V4.00.02.20 or later
Samsung proXpress SL-M4530ND	SS397A, SS397B, SS397C, SS397D, SS397E, SS397F, SS397G, SS397H, SS397J, SS397K, SS397L, SS397M, SS397M, SS397N, SS397P, SS397Q, SS398A, SS398B, SS398C, SS398D, SS398E, SS398F, SS398G	V3.00.01.25 or later
Samsung Xpress SL-M2835 Laser Printer	SS346A, SS346B, SS346C, SS346D, SS346E, SS346F, SS346G, SS346F, SS346G, SS346H, SS346J, SS346K, SS346L, SS346M	V3.00.01.14 or later
Samsung Xpress SL-M2885 Laser Multifunction Printer	SS359A, SS359B, SS359C, SS359D, SS359E, SS359F, SS359G, SS359H, SS359J, SS359K, SS359L, SS359M, SS359N, SS359P, SS359Q, SS359Z	V3.00.01.18 or later

HP DeskJet, HP OfficeJet, HP OfficeJet Pro, HP Ink Tank, HP Smart Tank

Product Name	Model Number	Firmware Revision
HP Deskjet 2540 All-in-One/ HP Deskjet 2545 All-in-One	K9B57B, K9B59A, K8T38A, K9B56A, D3A81A, A9U22A, A9U22B, A9U19A, K2W35A, A9U27A, A9U28B, D3A80A, J7V18B, D3A78B, D3A79A, D3A82A, J7V17B, J7V19B, K9B54A, E1E94B, K9B55A	2023B or later
HP DeskJet 2600 All-in-One Printer	V1N01B, V1N01C, Y5H80A, Y5H68A, Y5H68D, 4UJ28B, V1N07A, Y5H67A, Y5H67D, Y5H69A, Y5H69D, V1N08A, Y5H60A, Y5H61A, Y5H62A, Y5H72D, V1N03B, V1N03C, V1N05B, V1N05C, V1N06B, V1N07B, Y5H63A, Y5H64A, Y5H65A, V1N05A, V1N01A, V1N03A, V1N04A, 5SF02A, 5SF03A, 5SF04A, Y5H58A, Y5H66A	2021B or later
HP DeskJet 2700 All-in-One Printer HP DeskJet Ink Advantage 2700 All-in-One series HP DeskJet Ink Advantage 2700 All-in-One series HP DeskJet Plus 4100 All-in-One series HP DeskJet Plus Ink Advantage 4100 All-in-One series	3XV13A, 3XV14B, 3XV14C, 3XV15A, 3XV15D, 3XV17A, 3XV18B, 3XV18C, 3XV19A, 3XV19D, 4WS03B, 4WS04A, 4WS04B, 5AR83A, 5AR83B, 5AR84A, 5AR85A, 7FR20A, 7FR21A, 7FR26B, 7FR27B, 7FR28B, 7FR29B, 7FR48D, 7FR50B, 7FR52A, 7FR53A, 7FR53B, 7FR54B, 7FR55B, 7FR56D, 7FR57A, 7FR57D, 7FR58A, 7FR59D, 7FR60D, 7FR61A, 7FS74A, 7FS74D, 7FS75D, 7FS76A, 7FS77B, 7FS79A, 7FS79B, 7FS81B, 7FS83D, 7FS86A, 7FS87A, 7FS87D, 7FS88A, 7FS88D, 7HZ98B, 7HZ99B, 7MR23A, 7MR24A, 8QB70A, 8RK11A	2021D or later
HP Deskjet 3520 e-All-in-One	CX052A, CX052B, CX052C, CX053C, CX056A, CX056AR, F6H93A, CX058A, E3P97A, CX055B, CX057A, CX054B, CX059A	2023A or later
HP DeskJet 3630 All-in-One Printer	F5S43A, F5S57A, K4T99B, K4T99C, K4T94A, F5S47A, F5S48A, F5S49B, K4T95A, K4U03B, F5S50B, K4T93A, F5S56B, K4T96A, K4U00B, V3F21A, V3F22A, K4T97A, K4U01B, K4U02B, F5S43B, F5S43C	2020C or later
HP DeskJet 3790 series (HP AMP 100, 130, 100, 105)	T8X39A, T8X40A, T8X42A, T8X39D, T8X44A, 1SH08A, T8X40D, T8X39B, T8X39C, T8X40B	2022A or later
HP Deskjet 5520 e-All-in-One	C7G19A, CX042A, CX042B, CX045C, CX046C, K8G35A, CX042AR, CX049C, CX044A, CX048B, CX047B, CX043A, CX043B	2023A or later
HP DeskJet GT 5820 All-in-One Printer	2ND31A, M2Q28A, P0R21A, X3B09A, 1WW50A, 2ND32A, P0R22A	2027B or later
HP DeskJet Ink Advantage 2600 All-in-One Printer	V1N02A, V1N02B, Y5Z00A, Y5Z03B, Y5Z04B, Y5Z02B, 7FQ79B, 7FQ80B, 7FQ81B	2021B or later
HP Deskjet Ink Advantage 3540 e-All-in-One Printer	E6G69A, A9T81A, A9T81B, A9T81C, F9A24A, L5T77A, A9T82A, A9T84C, A9T83B	2025A or later
HP DeskJet Ink Advantage 3630 All-in-One Printer	F5S44A, F5S44B, F5S44C, K4U06A, K4U07A, K4U08A, F5S45A, F5S53C, K4U05B, F5S46B	2020C or later
HP DeskJet Ink Advantage 3700 All-in-One Printer series HP DeskJet 3700 All-in-One Printer series	1DT61A, 1DT62A, 3YZ74A, 3YZ75A, 4SC29A, 4SC30A, 7FM64B, 7FM65B, 7FM66B, J9V86A, J9V86B, J9V87A, J9V87B, J9V87C, J9V88A, J9V89B, J9V90A, J9V91A, J9V92A, J9V93B, J9V94B, J9V95B, J9V96B, J9V97B, T8W35A, T8W36A, T8W37A, T8W38A, T8W39B, T8W40B, T8W41B, T8W42C, T8W46C, T8W47C, T8W48C, T8W49C, T8W50C, T8W51A, T8W52A, T8W54A, T8W56A, T8W57A, T8W58A, T8W59A, T8W83A, T8W92A, T8W93A, T8W94A, T8W95A, T8W96A, T8X00B, T8X01B, T8X04B, T8X05B, T8X06B, T8X07B, T8X10B, T8X12B, T8X19B, T8X23B, T8X27B	2020B or later
HP Deskjet Ink Advantage 3830 e-All-in-One Printer	F5R96A, F5R96B, F5R96C, F5R97A, F5R98B	2021A or later
HP Deskjet Ink Advantage 4530 All-in-One Printer	E6G68A, F0V64A, F0V64B, F0V64C, F0V65A, F0V66B	2023B or later
HP DeskJet Ink Advantage 4670 All-in-One Printer	F1H97A, 1H97B, F1H97C, F1H98A, F1H99B	2022A or later
HP DeskJet Ink Advantage 5570 All-in-One Printer	G0V48B, G0V48C	2023A or later
HP DeskJet Ink Advantage Ultra 4720 All-in-One Printer	F5S65A, F5S66A, L8L91A	2020B or later
HP ENVY 4500 e-All-in-One Printer	N4E46A, A9T80A, A9T80B, D3P93A, F2K48A, K2M74A, C8D05A, A9T85A, A9T87B, E6G71B, A9T88B, A9T89A, C8D04A, A9T86A, D3P95A, E6G70B, E6G72B, D3P94A, D3P94B	2025A or later
HP ENVY 4510 All-in-One Printer	K9H48A, K9H50A, K9H49A, K9H51A, K9H52A, K9H53A	2023B or later
HP Envy 4520 All-in-One Printer	E6G67A, E6G67B, F0V63A, F0V63B, F0V69A, J6U70B, K9T10B, F0V67A, F0V70B, F0V73A, J6U59B, J6U60B, W3U26A, F0V71B, F0V72B, J6U69A, K9T01A, K9T09B, K9T05B, J6U61B, K9T06B, K9T07B, K9T08B	2023B or later
HP ENVY 5530 e-All-in-One Printer	A9J40A, A9J40B, A9J49A, A9J47A, K2M73A, A9J45A, A9J48B, A9J46A, D4J85B, A9J44A, K3Z41A, D4J86B, A9J48A	2024A or later
HP ENVY 5540 All-in-One Printer	F2E72A, G0V47A, G0V52A, G0V53A, J6U66A, K7C85A, K7G89A, G0V51A, K7C86A, K7C87A, K7C88A, K7G90A, N9U88A, G0V54A, K7C89A, K7C93A, G0V50A, K7G88A, J6U67A, K7C90A, J6U64A, K7G87A, K7G86A	2023A or later
HP ENVY 5640 e-All-in-One Printer	B9S56A, B9S58A, B9S59A, B9S61A, B9S64A, F8B13A, K5L42A, B9S63A, B9S62A, B9S65A, F8B05A	2023A or later
HP ENVY 5660 e-All-in-One Printer	F8B04A, F8B04AR, F8B07A, F8B12A, T5R62A, F8B06A, F8B08A	2023A or later
HP ENVY 7640 e-All-in-One Printer series	E4W43A, E4W43B, E4W47A, E4W43AR, E4W45A, E4W46A, E4W44A	2022A or later
HP Ink Tank Wireless 410	Z6Z95A, 4YF79A, Z6Z99A, 4DX94A, Z4B53A, 4DX95A, Z4B55A, Z7A01A, Z4B54A, Z6Z97A	2020A or later
HP Officejet 200 Mobile Printer Series	CZ993A, L9B95A	2020B or later
HP Officejet 202 Mobile Printer Series	N4K99C, N4L14C	2020B or later
HP OfficeJet 250 Mobile Series	CZ992A, L9D57A, N4L17A, N4L16C, N4L18C	2020B or later
HP Officejet 3830 e-All-in-One Printer	F5R95A, F5R95B, F5R95C, K7V40A, K7V36A, K7V45B, F5R99A, F5S01B, F5S03B, K7V37A, F5S02B, K7V44B, K7V38A	2021A or later
HP Officejet 4630 e-All-in-One Printer	B4L03A, B4L03B, B4L03C, D4J76A, E6G81A, E6G81B, B4L07A, B4L05A, B4L06B, E6G85B, D4J74A, D4J78B, B4L04A, E6G86B, D4J75A, D4J77B	2025A or later
HP OfficeJet 4650 All-in-One Printer	E6G87A, F1H96A, F1H96B, F1J03A, F1J04A, F9D37A, K9V77A, K9V85B, K9V83B, F1J02A, F1J05B, K9V84B, F1J06B, F1J07B, K9V76A, F1J00A, K9V79A, K9V82B, K9V81B, V6D27B, V6D29B, V6D28B, V6D30B	2022A or later
HP Officejet 5740 e-All-in-One Printer series	B9S76A, B9S78A, B9S79A, B9S83A, B9S81A, B9S84A, F8B11A, F8B10A, B9S82A, B9S85A, B9S80A, F8B09A, T1P36A	2022A or later
HP OfficeJet 6950 All-in-One	P4C78A, P4C85A, T3P03A, P4C86A, P4C81A, P4C82A, P4C84A	2020B or later
HP OfficeJet 6960 All-in-One HP OfficeJet Pro 6960 All-in-One	T0G25A, T0G26A, J7K33A, T0F30A, T0F32A, T0F38A, T0F31A, J7K37A, J7K38A, J7K35A, J7K39A, T0F28A, T0F36A	2020C or later
HP Officejet 7110 Wide Format ePrinter	CR768A	2020B or later
HP Officejet 7510 Wide Format e-All-in-One	G3J47A, K1Z44A	2022A or later
HP Officejet 7610 Wide Format e-All-in-One	CR769A, G1X85A	2022A or later
HP Officejet Pro 6230 / 6220 ePrinter	E3E03A	2021A or later
HP OfficeJet Pro 6970 All-in-One Printer series	J7K34A, T0F33A, T0F39A, T0F34A, T0F35A, J7K40A, J7K36A, J7K42A, J7K41A, T0F29A, T0F37A, T0F40A	2020C or later
HP Officejet Pro 8630 e-All-in-One	A7F66A	2022A or later
HP OfficeJet Pro 8710 All-in-One Printer series HP OfficeJet Pro 8720 All-in-One Printer series	D9L18A, D9L19A, J6X76A, J6X77A, J6X78A, J6X79A, J6X80A, J6X81A, J7A28A, J7A29A, J7A31A, K7S34A, K7S35A, K7S36A, K7S37A, K7S38A, M9L65A, M9L66A, M9L67A, M9L70A, M9L74A, M9L75A, M9L76A, M9L80A, T0G46A, T0G47A, T0G48A, T0G49A, T0G54A	2020A or later
HP OfficeJet Pro X451, X551 Printer	CV037A, CN463A	2022A or later
HP OfficeJet Pro X476, X576 Multifunction Printer	CN598A, CN460A, CN461A	2022A or later
HP Photosmart 6520 e-All-in-One	CX017A, CX017B, CX020C, CX021C, CX018A, CX018B	2024A or later
HP Smart Tank Wireless 450	Z6Z96A, Z4B56A, Z6Z98A	2020A or later

HP DesignJet

Product Name	Model Number	Firmware Revision
HP DesignJet T100 24-in Printer HP DesignJet T125 24-in Printer HP DesignJet T130 24-in Printer HP DesignJet T525 24-in Printer HP DesignJet T530 24-in Printer HP DesignJet T525 36-in Printer HP DesignJet T530 36-in Printer	5ZY56A, 5ZY57A, 5ZY58A, 5ZY59A, 5ZY60A, 5ZY60B, 5ZY61A, 5ZY62A, 5ZY62B	2023A or later
HP DesignJet T120 24-in ePrinter HP DesignJet T120 24-in Printer HP DesignJet T120 24-in Printer (2018 edition) HP DesignJet T520 24-in ePrinter HP DesignJet T520 24-in Printer HP DesignJet T520 24-in Printer (2018 edition) HP DesignJet T520 24-in Printer (2018 edition) HP DesignJet T520 24-in Printer (2018 edition, legless)	CQ891A, CQ891B, CQ891C, CQ890A, CQ890B, CQ890C, CQ890D, CQ890E	2022A or later
HP DesignJet T520 36-in ePrinter HP DesignJet T520 36-in Printer HP DesignJet T520 36-in Printer (2018 edition) HP DesignJet T520 36-in Printer (2018 edition, legless)	CQ893A, CQ893B, CQ893C, CQ893E	2023A or later

Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.

Support: For issues about implementing the recommendations of this Security Bulletin, visit https://www.hp.com/go/contacthp to learn about your HP support options.

Report: To report a potential security vulnerability with any HP supported product, send email to: hp-security-alert@hp.com.

Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via email, visit https://www.hp.com/go/alerts.

Security Bulletin Archive: To view released Security Bulletins, search the HP Support Site for "security bulletin".

Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.

PI	HP Printing and Imaging
HF	HP Hardware and Firmware
GN	HP General Software

It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.

To get the security-alert PGP key, please send an e-mail message as follows:

To: hp-security-alert@hp.com

Subject: get key

System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.

"HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin. HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action. HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin. To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement."

REVISION HISTORY : Version 1: 16 June 2020 - Initial release; Version 2: 14 July 2020 - Updated product table; Version 3: 31 July 2020 - Updated product table

HP Inc. shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. HP Inc. and the names of HP products referenced herein are trademarks of HP Inc. in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.