{"cve":"CVE-2021-3942","nvd":{"published":"2022-12-12T13:15:11.860","modified":"2026-06-17T04:06:01.537","status":"Modified","description":"Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":["CWE-119"],"references":["https://support.hp.com/us-en/document/ish_5948778-5949142-16/hpsbpi03780","https://support.hp.com/us-en/document/ish_5948778-5949142-16/hpsbpi03780"],"products":["hp:color_laserjet_cm4540_mfp_cc419a_firmware","hp:color_laserjet_cm4540_mfp_cc420a_firmware","hp:color_laserjet_cm4540_mfp_cc421a_firmware","hp:color_laserjet_cm5525_mfp_ce707a_firmware","hp:color_laserjet_cm5525_mfp_ce708a_firmware","hp:color_laserjet_cm5525_mfp_ce709a_firmware","hp:color_laserjet_enterprise_flow_mfp_m577_b5l46a_firmware","hp:color_laserjet_enterprise_flow_mfp_m577_b5l47a_firmware","hp:color_laserjet_enterprise_flow_mfp_m577_b5l48a_firmware","hp:color_laserjet_enterprise_flow_mfp_m577_b5l54a_firmware","hp:color_laserjet_enterprise_flow_mfp_m680_ca251a_firmware","hp:color_laserjet_enterprise_flow_mfp_m680_cz248a_firmware","hp:color_laserjet_enterprise_flow_mfp_m680_cz249a_firmware","hp:color_laserjet_enterprise_flow_mfp_m680_cz250a_firmware","hp:color_laserjet_enterprise_flow_mfp_m681_j8a10a_firmware","hp:color_laserjet_enterprise_flow_mfp_m681_j8a11a_firmware","hp:color_laserjet_enterprise_flow_mfp_m681_j8a12a_firmware","hp:color_laserjet_enterprise_flow_mfp_m681_j8a13a_firmware","hp:color_laserjet_enterprise_flow_mfp_m682_j8a16a_firmware","hp:color_laserjet_enterprise_flow_mfp_m682_j8a17a_firmware","hp:color_laserjet_enterprise_flow_mfp_m776_t3u55a_firmware","hp:color_laserjet_enterprise_flow_mfp_m776_t3u56a_firmware","hp:color_laserjet_enterprise_flow_mfp_m880z_a2w75a_firmware","hp:color_laserjet_enterprise_flow_mfp_m880z_a2w76a_firmware","hp:color_laserjet_enterprise_flow_mfp_m880z_d7p70a_firmware","hp:color_laserjet_enterprise_flow_mfp_m880z_d7p71a_firmware","hp:color_laserjet_enterprise_flow_mfp_m880z_l3u51a_firmware","hp:color_laserjet_enterprise_flow_mfp_m880z_l3u52a_firmware","hp:color_laserjet_enterprise_m553_b5l24a_firmware","hp:color_laserjet_enterprise_m553_b5l25a_firmware","hp:color_laserjet_enterprise_m553_b5l26a_firmware","hp:color_laserjet_enterprise_m553_b5l27a_firmware","hp:color_laserjet_enterprise_m553_b5l38a_firmware","hp:color_laserjet_enterprise_m553_b5l39a_firmware","hp:color_laserjet_enterprise_m554_7zu78a_firmware","hp:color_laserjet_enterprise_m554_7zu79a_firmware","hp:color_laserjet_enterprise_m554_7zu81a_firmware","hp:color_laserjet_enterprise_m555_7zu78a_firmware","hp:color_laserjet_enterprise_m555_7zu79a_firmware","hp:color_laserjet_enterprise_m555_7zu81a_firmware","hp:color_laserjet_enterprise_m651_cz255a_firmware","hp:color_laserjet_enterprise_m651_cz256a_firmware","hp:color_laserjet_enterprise_m651_cz257a_firmware","hp:color_laserjet_enterprise_m651_h0dc9a_firmware","hp:color_laserjet_enterprise_m651_l8z07a_firmware","hp:color_laserjet_enterprise_m652_j7z98a_firmware","hp:color_laserjet_enterprise_m652_j7z99a_firmware","hp:color_laserjet_enterprise_m653_j8a04a_firmware","hp:color_laserjet_enterprise_m653_j8a05a_firmware","hp:color_laserjet_enterprise_m653_j8a06a_firmware"],"source":"nvd","synced_at":"2026-10-19T21:37:28.463369388+00:00"},"epss":{"cve":"CVE-2021-3942","score":0.01561,"percentile":0.75243,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}