Strix
26.1K

CVE-2023-35175

CRITICALCVSS 9.8/10EPSS 1.83%

Last modified

CVE-2023-35175 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.. EPSS estimates a 1.83% chance of exploitation in the next 30 days.

Description

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
1.83%

76.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
HpW1a75a Firmware< 002_2322c
HpW1a76a Firmware< 002_2322c
HpW1a77a Firmware< 002_2322c
HpW1a78a Firmware< 002_2322c
HpW1a79a Firmware< 002_2322c
HpW1a80a Firmware< 002_2322c
HpW1a81a Firmware< 002_2322c
HpW1a82a Firmware< 002_2322c
HpLaserjet Pro M453-M454 W1y40a Firmware< 002_2322c
HpLaserjet Pro M453-M454 W1y41a Firmware< 002_2322c
HpLaserjet Pro M453-M454 W1y43a Firmware< 002_2322c
HpLaserjet Pro M453-M454 W1y44a Firmware< 002_2322c
HpLaserjet Pro M453-M454 W1y45a Firmware< 002_2322c
HpLaserjet Pro M453-M454 W1y46a Firmware< 002_2322c
HpLaserjet Pro M453-M454 W1y47a Firmware< 002_2322c
HpLaserjet Pro M304-M305 W1a46a Firmware< 002_2322c
HpLaserjet Pro M304-M305 W1a47a Firmware< 002_2322c
HpLaserjet Pro M304-M305 W1a48a Firmware< 002_2322c
HpLaserjet Pro M304-M305 W1a66a Firmware< 002_2322c
HpLaserjet Pro M404-M405 93m22a Firmware< 002_2322c
HpLaserjet Pro M404-M405 W1a51a Firmware< 002_2322c
HpLaserjet Pro M404-M405 W1a52a Firmware< 002_2322c
HpLaserjet Pro M404-M405 W1a53a Firmware< 002_2322c
HpLaserjet Pro M404-M405 W1a56a Firmware< 002_2322c
HpLaserjet Pro M404-M405 W1a57a Firmware< 002_2322c
HpLaserjet Pro M404-M405 W1a58a Firmware< 002_2322c
HpLaserjet Pro M404-M405 W1a59a Firmware< 002_2322c
HpLaserjet Pro M404-M405 W1a60a Firmware< 002_2322c
HpLaserjet Pro M404-M405 W1a63a Firmware< 002_2322c
HpLaserjet Pro Mfp M428-M429 F W1a29a Firmware< 002_2322c
HpLaserjet Pro Mfp M428-M429 F W1a30a Firmware< 002_2322c
HpLaserjet Pro Mfp M428-M429 F W1a32a Firmware< 002_2322c
HpLaserjet Pro Mfp M428-M429 F W1a34a Firmware< 002_2322c
HpLaserjet Pro Mfp M428-M429 F W1a35a Firmware< 002_2322c
HpLaserjet Pro Mfp M428-M429 F W1a38a Firmware< 002_2322c
HpLaserjet Pro Mfp M428-M429 W1a28a Firmware< 002_2322c
HpLaserjet Pro Mfp M428-M429 W1a31a Firmware< 002_2322c
HpLaserjet Pro Mfp M428-M429 W1a33a Firmware< 002_2322c

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2023-35175?
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
How severe is CVE-2023-35175?
CVE-2023-35175 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 1.83% probability of exploitation in the next 30 days.
How do I fix CVE-2023-35175?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2023

View all 2023CVEs →

Are you affected by CVE-2023-35175?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST