Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2023-35176

Published: 30/06/2023 Updated: 07/07/2023
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0
Subscribe to Laserjet Pro Mfp M478-m479 W1a75a Firmware

Vulnerability Summary

This vulnerability allows network-adjacent malicious users to bypass authentication on affected installations of HP LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Backup and Restore functionality. The issue results from a hardcoded crytographic key. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of the device.

Vulnerable Product Search on Vulmon Subscribe to Product

hp laserjet_pro_mfp_m478-m479_w1a75a_firmware

hp laserjet_pro_mfp_m478-m479_w1a76a_firmware

hp laserjet_pro_mfp_m478-m479_w1a77a_firmware

hp laserjet_pro_mfp_m478-m479_w1a78a_firmware

hp laserjet_pro_mfp_m478-m479_w1a79a_firmware

hp laserjet_pro_mfp_m478-m479_w1a80a_firmware

hp laserjet_pro_mfp_m478-m479_w1a81a_firmware

hp laserjet_pro_mfp_m478-m479_w1a82a_firmware

hp laserjet_pro_m453-m454_w1y40a_firmware

hp laserjet_pro_m453-m454_w1y41a_firmware

hp laserjet_pro_m453-m454_w1y43a_firmware

hp laserjet_pro_m453-m454_w1y44a_firmware

hp laserjet_pro_m453-m454_w1y45a_firmware

hp laserjet_pro_m453-m454_w1y46a_firmware

hp laserjet_pro_m453-m454_w1y47a_firmware

hp laserjet_pro_m304-m305_w1a46a_firmware

hp laserjet_pro_m304-m305_w1a47a_firmware

hp laserjet_pro_m304-m305_w1a48a_firmware

hp laserjet_pro_m304-m305_w1a66a_firmware

hp laserjet_pro_m404-m405_93m22a_firmware

hp laserjet_pro_m404-m405_w1a51a_firmware

hp laserjet_pro_m404-m405_w1a52a_firmware

hp laserjet_pro_m404-m405_w1a53a_firmware

hp laserjet_pro_m404-m405_w1a56a_firmware

hp laserjet_pro_m404-m405_w1a57a_firmware

hp laserjet_pro_m404-m405_w1a58a_firmware

hp laserjet_pro_m404-m405_w1a59a_firmware

hp laserjet_pro_m404-m405_w1a60a_firmware

hp laserjet_pro_m404-m405_w1a63a_firmware

hp laserjet_pro_mfp_m428-m429_f_w1a29a_firmware

hp laserjet_pro_mfp_m428-m429_f_w1a30a_firmware

hp laserjet_pro_mfp_m428-m429_f_w1a32a_firmware

hp laserjet_pro_mfp_m428-m429_f_w1a34a_firmware

hp laserjet_pro_mfp_m428-m429_f_w1a35a_firmware

hp laserjet_pro_mfp_m428-m429_f_w1a38a_firmware

hp laserjet_pro_mfp_m428-m429_w1a28a_firmware

hp laserjet_pro_mfp_m428-m429_w1a31a_firmware

hp laserjet_pro_mfp_m428-m429_w1a33a_firmware

References

CWE-120https://support.hp.com/us-en/document/ish_8651671-8651697-16/hpsbpi03852https://nvd.nist.govhttps://www.zerodayinitiative.com/advisories/ZDI-23-1170/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028memory leaklog injectionCVE-2024-3400CVE-2022-48695CVE-2022-48675CVE-2024-34487CVE-2024-33792spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook