CVSS 3.0
8.8 highCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2018-5921
A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:a2w75a_firmware
- hp:a2w76a_firmware
- hp:a2w77a_firmware
- hp:a2w78a_firmware
- hp:a2w79a_firmware
- hp:b3g84a_firmware
- hp:b3g85a_firmware
- hp:b3g86a_firmware
- hp:b5l04a_firmware
- hp:b5l05a_firmware
- hp:b5l06a_firmware
- hp:b5l07a_firmware
- hp:b5l26a_firmware
- hp:b5l39a_firmware
- hp:b5l46a_firmware
- hp:b5l47a_firmware
- hp:b5l48a_firmware
- hp:b5l49a_firmware
- hp:b5l50a_firmware
- hp:b5l54a_firmware
- hp:c2s11a_firmware
- hp:c2s11v_firmware
- hp:c2s12a_firmware
- hp:c2s12v_firmware
- hp:ca251a_firmware
- hp:cc522a_firmware
- hp:cc523a_firmware
- hp:cc524a_firmware
- hp:cd644a_firmware
- hp:cd645a_firmware
- hp:cd646a_firmware
- hp:cf066a_firmware
- hp:cf067a_firmware
- hp:cf068a_firmware
- hp:cf069a_firmware
- hp:cf116a_firmware
- hp:cf117a_firmware
- hp:cf118a_firmware
- hp:cf367a_firmware
- hp:cz244a_firmware
- hp:cz245a_firmware
- hp:cz248a_firmware
- hp:cz249a_firmware
- hp:cz250a_firmware
- hp:d7p68a_firmware
- hp:d7p70a_firmware
- hp:d7p71a_firmware
- hp:d7p73a_firmware
- hp:e6b71a_firmware
- hp:e6b73a_firmware