Skip to content
Fencer Vulns
critical 9.8

CVE-2018-5923 json

In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signatur…

published 2019-03-27 7 y ago modified 2026-06-17 4 mo ago also EUVD-2018-17690

cvss
9.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.6%
EPSS 2.6% chance of exploitation in 30 days, percentile 85%
public exploits
0
none known

Summary

In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution of arbitrary code.

Patch / fix

  • hp color_laserjet_cm4540_mfp_firmware 2308974_579754
  • hp color_laserjet_cp5525_firmware 2308974_579753
  • hp color_laserjet_enterprise_flow_mfp_m681f_firmware 2406087_000017
  • hp color_laserjet_enterprise_flow_mfp_m681z_firmware 2406087_000017
  • hp color_laserjet_enterprise_flow_mfp_m682z_firmware 2406087_000017
  • hp color_laserjet_enterprise_m552_firmware 2308974_579763
  • hp color_laserjet_enterprise_m553_firmware 2308974_579763
  • hp color_laserjet_enterprise_m651_firmware 2308974_579770, 2406048_029632
  • hp color_laserjet_enterprise_m652n_firmware 2406087_000016
  • hp color_laserjet_enterprise_m652dn_firmware 2406087_000016
  • hp color_laserjet_enterprise_m653dn_firmware 2406087_000016
  • hp color_laserjet_enterprise_m653dh_firmware 2406087_000016
  • hp color_laserjet_enterprise_m653x_firmware 2406087_000016
  • hp color_laserjet_enterprise_m750_firmware 2308974_579776
  • hp color_laserjet_enterprise_mfp_m577_firmware 2308974_579760, 2406048_029627
  • hp color_laserjet_enterprise_mfp_m681dh_firmware 2406087_000017
  • hp color_laserjet_enterprise_mfp_m681f_firmware 2406087_000017
  • hp color_laserjet_enterprise_mfp_m682dh_firmware 2406087_000017
  • hp color_laserjet_m680_firmware 2308974_579771, 2406048_029633
  • hp color_laserjet_managed_e55040dw_firmware 2406048_029643

Exploit prediction

2.64% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • HP HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers

Classification

Weakness
  • CWE-347 Improper Verification of Cryptographic Signature

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.