Skip to content
Fencer Vulns
critical 9.8

CVE-2019-6318 json

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an in…

published 2019-04-11 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-15883

cvss
9.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.6%
EPSS 2.6% chance of exploitation in 30 days, percentile 85%
public exploits
0
none known

Summary

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.

Patch / fix

  • hp color_laserjet_cm4540_mfp_firmware 2309010_581401
  • hp color_laserjet_enterprise_cp5525_firmware 2309010_581402
  • hp color_laserjet_enterprise_m553_firmware 2309010_581409
  • hp color_laserjet_enterprise_m552_firmware 2309010_581409, 2407081_00060
  • hp color_laserjet_managed_m553_firmware 2309010_581409, 2407081_000601
  • hp color_laserjet_enterprise_m651_firmware 2309010_581418, 2407081_000585
  • hp color_laserjet_managed_m651_firmware 2309010_581418, 2407081_000585
  • hp color_laserjet_enterprise_m652_firmware 2407081_000586
  • hp color_laserjet_enterprise_m653_firmware 2407081_000586
  • hp color_laserjet_enterprise_m750_firmware 2309010_581423
  • hp color_laserjet_enterprise_m855_firmware 2309010_581419, 2407081_000589
  • hp color_laserjet_enterprise_mfp_m577_firmware 2309010_581408, 2407081_000571
  • hp color_laserjet_enterprise_flow_mfp_m577_firmware 2309010_581408, 2407081_000571
  • hp color_laserjet_enterprise_mfp_m680_firmware 2309010_581416, 2407081_000591
  • hp color_laserjet_enterprise_flow_mfp_m680_firmware 2309010_581416, 2407081_000591
  • hp color_laserjet_enterprise_mfp_m681_firmware 2407081_000578
  • hp color_laserjet_enterprise_flow_mfp_m681_firmware 2407081_000578
  • hp color_laserjet_enterprise_mfp_m682_firmware 2407081_000578
  • hp color_laserjet_enterprise_flow_mfp_m682_firmware 2407081_000578
  • hp color_laserjet_enterprise_flow_mfp_m880z_firmware 2309010_581433, 2407081_000599

Exploit prediction

2.64% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • HP HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers

Classification

Weakness
  • CWE-347 Improper Verification of Cryptographic Signature

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.