{"cve":"CVE-2020-28416","nvd":{"published":"2021-11-03T20:15:08.143","modified":"2026-06-17T03:10:25.410","status":"Modified","description":"HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with HP PageWide and OfficeJet printer software installations that could potentially allow unauthorized local code execution.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8},"cwes":[],"references":["https://support.hp.com/us-en/document/c07051163","https://support.hp.com/us-en/document/c07051163"],"products":["hp:officejet_250_cz992a_firmware","hp:officejet_250c_l9d57a_firmware","hp:officejet_252_n4l16c_firmware","hp:officejet_252c_n4l18c_firmware","hp:officejet_258_n4l17a_firmware","hp:officejet_4650_e6g87a_firmware","hp:officejet_4650_f1h96a_firmware","hp:officejet_4650_f1h96b_firmware","hp:officejet_4650_f1j03a_firmware","hp:officejet_4650_f1j04a_firmware","hp:officejet_4650_f9d37a_firmware","hp:officejet_4650_k9v77a_firmware","hp:officejet_4650_k9v85b_firmware","hp:officejet_4651_k9v83b_firmware","hp:officejet_4652_f1j02a_firmware","hp:officejet_4652_f1j05b_firmware","hp:officejet_4652_k9v84b_firmware","hp:officejet_4654_f1j06b_firmware","hp:officejet_4654_f1j07b_firmware","hp:officejet_4654_k9v76a_firmware","hp:officejet_4655_f1j00a_firmware","hp:officejet_4655_k9v82b_firmware","hp:officejet_4656_k9v81b_firmware","hp:officejet_4657_v6d27b_firmware","hp:officejet_4657_v6d29b_firmware","hp:officejet_4658_v6d28b_firmware","hp:officejet_4658_v6d30b_firmware","hp:officejet_5740_b9s76a_firmware","hp:officejet_5740_b9s78a_firmware","hp:officejet_5740_b9s79a_firmware","hp:officejet_5741_b9s83a_firmware","hp:officejet_5742_b9s81a_firmware","hp:officejet_5742_b9s84a_firmware","hp:officejet_5742_f8b11a_firmware","hp:officejet_5743_f8b10a_firmware","hp:officejet_5744_b9s82a_firmware","hp:officejet_5744_b9s85a_firmware","hp:officejet_5745_b9s80a_firmware","hp:officejet_5746_f8b09a_firmware","hp:officejet_5746_t1p36a_firmware","hp:officejet_6835_t6t84a_firmware","hp:officejet_6950_p4c78a_firmware","hp:officejet_6950_p4c81a_firmware","hp:officejet_6950_p4c82a_firmware","hp:officejet_6950_p4c84a_firmware","hp:officejet_6950_p4c85a_firmware","hp:officejet_6950_p4c86a_firmware","hp:officejet_6950_t3p03a_firmware","hp:officejet_6960_j7k33a_firmware","hp:officejet_6960_j7k35a_firmware"],"source":"nvd","synced_at":"2026-10-19T21:24:39.218183596+00:00"},"epss":{"cve":"CVE-2020-28416","score":0.00378,"percentile":0.31823,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}