Elevation of privilege
Source: HP, HP Product Security Response Team (PSRT)
Reported by: HP
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to elevation of privilege when running Workpath solutions on Enterprise-class printers.
VULNERABILITY SUMMARY
Reference
|
Base Vector
|
Base Score
|
CVE-2020-6924
|
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
7.8
|
note:Please be aware that some models require an optional wireless accessory, listed in this bulletin, for wireless functionality.
Product name
|
Model Numbers
|
Firmware Version
|
HP Color LaserJet Enterprise MFP M577
HP Color LaserJet Enterprise Flow MFP M577
|
B5L46A, B5L47A, B5L48A, B5L54A
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Enterprise MFP M681
HP Color LaserJet Enterprise flow MFP M681
|
J8A10A, J8A11A J8A12A, J8A13A
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Enterprise MFP M682
HP Color LaserJet Enterprise flow MFP M682
|
J8A16A, J8A17A
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Enterprise MFP M776
HP Color LaserJet Enterprise Flow MFP M776
|
T3U55A, T3U56A
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Managed flow MFP E77822/25/30
|
X3A77A, X3A80A, X3A83A, Z8Z01A, Z8Z0A, Z8Z05A
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Managed MFP E57540
HP Color LaserJet Managed flow MFP E57540
|
3GY25A, 3GY26A
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Managed MFP E67550/60
HP Color LaserJet Managed flow MFP E67550/60
|
L3U66A, L3U67A, L3U69A, L3U70A,
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Managed MFP E67650/60
|
3GY31A, 3GY32A
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Managed MFP E77422/28
|
5CM75A, 5CM76A, 5CM77A, 5CM78A, 5CM79A, 5RC91A, 5RC92A
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Managed MFP E77822/25/30
|
X3A78A, X3A81A, X3A84A, Z8Z00A, Z8Z02A, Z8Z04A
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Managed MFP E87640/50/60
HP Color LaserJet Managed flow MFP E87640/50/60
|
X3A86A, X3A87A, X3A89A, X3A90A, X3A92A, X3A93A, Z8Z12A, Z8Z13A, Z8Z14A, Z8Z15A, Z8Z16A, Z8Z17A, 5CM63A, 5CM64A, 5CM65A, 5CM66A, 5RC87A, 5FM80A, 5FM81A, 5FM82A
|
FS4: 4.11.01 (or higher)
|
HP Color LaserJet Managed MFP M577
HP Color LaserJet Managed Flow MFP M577
|
B5L49A, B5L50A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Enterprise MFP M527
HP LaserJet Enterprise Flow MFP M527z
|
F2A76A, F2A77A, F2A78A, F2A81A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Enterprise MFP M528
HP LaserJet Managed MFP E52645
|
1PV49A, 1PS54A, 1PS55A, 1PV64A, 1PV65A, 1PV66A, 1PV67A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Enterprise MFP M631
HP LaserJet Enterprise flow MFP M631
|
J8J63A, J8J64A, J8J65A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Enterprise MFP M632
HP LaserJet Enterprise flow MFP M632
|
J8J70A, J8J71A, J8J72A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Enterprise MFP M633
HP LaserJet Enterprise flow MFP M633
|
J8J76A, J8J78A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Enterprise MFP M634
HP LaserJet Enterprise Flow MFP M634
|
7PS94A, 7PS95A, 7PS96A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Enterprise MFP M635
HP LaserJet Enterprise Flow MFP M635
|
7PS97A, 7PS98A, 7PS99A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Enterprise MFP M636
HP LaserJet Enterprise Flow MFP M636
|
7PT00A, 7PT01A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Managed MFP E52545
HP LaserJet Managed flow MFP E52545c
|
3GY19A, 3GY20A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Managed MFP E62555/65
HP LaserJet Managed flow MFP E62555/65/75
|
J8J66A, J8J67A, J8J73A, J8J74A, J8J79A, J8J80A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Managed MFP E62655/65
HP LaserJet Managed Flow MFP E62675
|
3GY14A, 3GY15A, 3GY16A, 3GY17A, 3GY18A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Managed MFP E72425/30
|
5CM68A, 5CM69A, 5CM70A, 5CM71A, 5CM72A, 5RC89A, 5RC90A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Managed MFP E72525/30/35
HP LaserJet Managed flow MFP E72525/30/35
|
X3A59A, X3A60A, X3A62A, X3A63A, X3A65A, X3A66A, Z8Z06A, Z8Z07A, Z8Z08A, Z8Z09A, Z8Z010A, Z8Z011A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Managed MFP E82540/50/60
HP LaserJet Managed flow MFP E82540/50/60
|
X3A68A, X3A69A, X3A71A, X3A72A, X3A74A, X3A75A, X3A79A, X3A82A, Z8Z18A, Z8Z19, AZ8Z20A, Z8Z22A, Z8Z23A, 5CM59A, 5RC83A, 5CM58A, 5CM60A, 5RC84A, 5CM61A, 5RC85A, 5FM77A, 5FM78A
|
FS4: 4.11.01 (or higher)
|
HP LaserJet Managed MFP M527
HP LaserJet Managed Flow MFP M527z
|
F2A79A, F2A80A
|
FS4: 4.11.01 (or higher)
|
HP PageWide Color MFP 774
|
4PZ43A, 4PA44A
|
FS4: 4.11.01 (or higher)
|
HP PageWide Color MFP 779
|
4PZ45A, 4PZ46A
|
FS4: 4.11.01 (or higher)
|
HP PageWide Enterprise Color Flow MFP 785
|
J7Z11A, J7Z12A
|
FS4: 4.11.01 (or higher)
|
HP PageWide Enterprise Color MFP 586
HP PageWide Enterprise Color flow MFP 586z
|
G1W39A, G1W40A, G1W41A
|
FS4: 4.11.01 (or higher)
|
HP PageWide Enterprise Color MFP 780
|
J7Z09A, J7Z10A
|
FS4: 4.11.01 (or higher)
|
HP PageWide Managed Color flow MFP E77660z
|
Z5G77A, J7Z03A, J7Z07A
|
FS4: 4.11.01 (or higher)
|
HP PageWide Managed Color MFP E58650dn
HP PageWide Managed Color flow MFP E58650z
|
L3U42A, L3U43A
|
FS4: 4.11.01 (or higher)
|
HP PageWide Managed Color MFP E77650
HP PageWide Managed Color Flow MFP E77650/60z
|
J7Z13A, Z5G79A, J7Z08A, J7Z14A, J7Z05A
|
FS4: 4.11.01 (or higher)
|
HP PageWide Managed Color MFP P77440
|
Y3Z60A
|
FS4: 4.11.01 (or higher)
|
HP PageWide Managed Color MFP P77940/50/60
|
Y3Z61A, Y3Z62A, Y3Z63A, Y3Z64A, Y3Z65A, Y3Z66A, Y3Z68A, 2GP22A, 2GP23A, 2GP25A, 2GP26A, 5ZN98A, 5ZN99A, 5ZP00A, 5ZP01A
|
FS4: 4.11.01 (or higher)
|
note:For firmware marked with *, please contact HP support to obtain the firmware update.