CVE-2022-48311

9.0 criticalEPSS 1.0%Unsupported when assigned

Critical (9.0) in hp deskjet 2540 a9u23b firmware. No vendor fix: the product was unsupported when the CVE was assigned. EPSS 1.0% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B allows authenticated attacker to inject their own script into the page via HTTP configuration page. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Severity

CVSS 3.1

9.0 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-02-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hp:deskjet_2540_a9u23b_firmware

References

https://github.com/swzhouu/CVE-2022-48311
https://github.com/swzhouu/CVE-2022-48311

Check your stack JSON