NA

CVE-2022-3942

Published: 11/11/2022 Updated: 07/11/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of HP LaserJet Pro MFP M283fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the LLMNR protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sanitization management system project sanitization management system -

Github Repositories

CVE-2022-3942 Cross Site Scripting in Sanitization Management System Description: A cross-site scripting (XSS) vulnerability in Sanitization Management System v10 allows potential attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks or Address Fields of the Request Quote Form As soon as the logged-in staff or admin user opens the