CVE-2023-35176

Name: CVE-2023-35176
Creator: NVD / NIST
Published: 2023-06-30T16:15:09.687+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 8.8/10EPSS 0.45%

Last modified Jun 25, 2026

CVE-2023-35176 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.

Description

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.

Metrics

CVSS 3.1

8.8/10

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 3.0

/10

EPSS Probability

0.45%

36.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-120

Affected Software

Vendor	Product	Versions
Hp	W1a75a Firmware	< 002_2322c
Hp	W1a76a Firmware	< 002_2322c
Hp	W1a77a Firmware	< 002_2322c
Hp	W1a78a Firmware	< 002_2322c
Hp	W1a79a Firmware	< 002_2322c
Hp	W1a80a Firmware	< 002_2322c
Hp	W1a81a Firmware	< 002_2322c
Hp	W1a82a Firmware	< 002_2322c
Hp	Laserjet Pro M453-M454 W1y40a Firmware	< 002_2322c
Hp	Laserjet Pro M453-M454 W1y41a Firmware	< 002_2322c
Hp	Laserjet Pro M453-M454 W1y43a Firmware	< 002_2322c
Hp	Laserjet Pro M453-M454 W1y44a Firmware	< 002_2322c
Hp	Laserjet Pro M453-M454 W1y45a Firmware	< 002_2322c
Hp	Laserjet Pro M453-M454 W1y46a Firmware	< 002_2322c
Hp	Laserjet Pro M453-M454 W1y47a Firmware	< 002_2322c
Hp	Laserjet Pro M304-M305 W1a46a Firmware	< 002_2322c
Hp	Laserjet Pro M304-M305 W1a47a Firmware	< 002_2322c
Hp	Laserjet Pro M304-M305 W1a48a Firmware	< 002_2322c
Hp	Laserjet Pro M304-M305 W1a66a Firmware	< 002_2322c
Hp	Laserjet Pro M404-M405 93m22a Firmware	< 002_2322c
Hp	Laserjet Pro M404-M405 W1a51a Firmware	< 002_2322c
Hp	Laserjet Pro M404-M405 W1a52a Firmware	< 002_2322c
Hp	Laserjet Pro M404-M405 W1a53a Firmware	< 002_2322c
Hp	Laserjet Pro M404-M405 W1a56a Firmware	< 002_2322c
Hp	Laserjet Pro M404-M405 W1a57a Firmware	< 002_2322c
Hp	Laserjet Pro M404-M405 W1a58a Firmware	< 002_2322c
Hp	Laserjet Pro M404-M405 W1a59a Firmware	< 002_2322c
Hp	Laserjet Pro M404-M405 W1a60a Firmware	< 002_2322c
Hp	Laserjet Pro M404-M405 W1a63a Firmware	< 002_2322c
Hp	Laserjet Pro Mfp M428-M429 F W1a29a Firmware	< 002_2322c
Hp	Laserjet Pro Mfp M428-M429 F W1a30a Firmware	< 002_2322c
Hp	Laserjet Pro Mfp M428-M429 F W1a32a Firmware	< 002_2322c
Hp	Laserjet Pro Mfp M428-M429 F W1a34a Firmware	< 002_2322c
Hp	Laserjet Pro Mfp M428-M429 F W1a35a Firmware	< 002_2322c
Hp	Laserjet Pro Mfp M428-M429 F W1a38a Firmware	< 002_2322c
Hp	Laserjet Pro Mfp M428-M429 W1a28a Firmware	< 002_2322c
Hp	Laserjet Pro Mfp M428-M429 W1a31a Firmware	< 002_2322c
Hp	Laserjet Pro Mfp M428-M429 W1a33a Firmware	< 002_2322c

References

https://support.hp.com/us-en/document/ish_8651671-8651697-16/hpsbpi03852Vendor Advisory
https://support.hp.com/us-en/document/ish_8651671-8651697-16/hpsbpi03852Vendor Advisory

Timeline

Published: Jun 30, 2023
Last Modified: Jun 25, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2023-35176?

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.

How severe is CVE-2023-35176?

CVE-2023-35176 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.45% probability of exploitation in the next 30 days.

How do I fix CVE-2023-35176?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-35176?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST