CVE-2018-5921: CSRF
Published Oct 3, 2018
·Updated
A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.
Affected Software
391 affected components
HP F2a70a Firmware<2405129_000052
HP F2a70a
HP F2a71a Firmware<2405129_000052
HP F2a71a
HP F2a67a Firmware<2405129_000052
HP F2a67a
HP B5l26a Firmware<2405129_000056
HP B5l26a
HP B5l39a Firmware<2405129_000056
HP B5l39a
HP C2s11a Firmware<2405129_000055
HP C2s11a
HP C2s11v Firmware<2405129_000055
HP C2s11v
HP C2s12a Firmware<2405129_000055
HP C2s12a
HP C2s12v Firmware<2405129_000055
HP C2s12v
HP L1h45a Firmware<2405129_000055
HP L1h45a
HP G1w46a Firmware<2405129_000051
HP G1w46a
HP G1w46v Firmware<2405129_000051
HP G1w46v
HP G1w47a Firmware<2405129_000051
HP G1w47a
HP G1w47v Firmware<2405129_000051
HP G1w47v
HP L3u44a Firmware<2405129_000051
HP L3u44a
HP L3u44a Firmware<2405135_000394
HP E6b71a Firmware<2405129_000046
HP E6b71a
HP E6b73a Firmware<2405129_000046
HP E6b73a
HP K0q14a Firmware<2405130_000069
HP K0q14a
HP K0q15a Firmware<2405130_000069
HP K0q15a
HP K0q17a Firmware<2405130_000069
HP K0q17a
HP K0q18a Firmware<2405130_000069
HP K0q18a
HP M0p32a Firmware<2405130_000069
HP M0p32a
HP K0q19a Firmware<2405130_000069
HP K0q19a
HP K0q20a Firmware<2405130_000069
HP K0q20a
HP K0q21a Firmware<2405130_000069
HP K0q21a
HP K0q22a Firmware<2405130_000069
HP K0q22a
HP M0p33a Firmware<2405130_000069
HP M0p33a
HP M0p35a Firmware<2405130_000069
HP M0p35a
HP M0p36a Firmware<2405130_000069
HP M0p36a
HP M0p39a Firmware<2405130_000069
HP M0p39a
HP M0p40a Firmware<2405130_000069
HP M0p40a
HP H0dc9a Firmware<2405129_000047
HP H0dc9a
HP L8z07a Firmware<2405129_000047
HP L8z07a
HP J7z98a Firmware<2405130_000068
HP J7z98a
HP J7z99a Firmware<2405130_000068
HP J7z99a
HP J8a04a Firmware<2405130_000068
HP J8a04a
HP J8a05a Firmware<2405130_000068
HP J8a05a
HP J8a06a Firmware<2405130_000068
HP J8a06a
HP L3u55a Firmware<2405130_000068
HP L3u55a
HP L3u56a Firmware<2405130_000068
HP L3u56a
HP L3u57a Firmware<2405130_000068
HP L3u57a
HP J7z04a Firmware<2405087_018564
HP J7z04a
HP J7z06a Firmware<2405087_018564
HP J7z06a
HP Cz244a Firmware<2405129_000059
HP Cz244a
HP A2w77a Firmware<2405129_000057
HP A2w77a
HP Cz245a Firmware<2405129_000059
HP Cz245a
HP A2w78a Firmware<2405129_000057
HP A2w78a
HP A2w79a Firmware<2405129_000057
HP A2w79a
HP D7p73a Firmware<2405129_000057
HP D7p73a
HP Cf116a Firmware<2405129_000048
HP Cf116a
HP Cf117a Firmware<2405129_000048
HP Cf117a
HP Cf118a Firmware<2405129_000048
HP Cf118a
HP L3u59a Firmware<2405129_000048
HP L3u59a
HP L3u60a<2405129_000048
HP L3u60a
HP F2a76a Firmware<2405129_000039
HP F2a76a
HP F2a77a Firmware<2405129_000039
HP F2a77a
HP F2a81a Firmware<2405129_000039
HP F2a81a
HP F2a78v Firmware<2405129_000039
HP F2a78v
HP F2a79a Firmware<2405129_000039
HP F2a79a
HP F2a80a Firmware<2405129_000039
HP F2a80a
HP Cd644a Firmware<2405135_000409
HP Cd644a
HP Cd645a Firmware<2405135_000409
HP Cd645a
HP Cd646a Firmware<2405129_000045
HP Cd646a
HP L3u46a Firmware<2405129_000045
HP L3u46a
HP L3u45a Firmware<2405129_000045
HP L3u45a
HP B5l46a Firmware<2405129_000038
HP B5l46a
HP B5l47a Firmware<2405129_000038
HP B5l47a
HP B5l48a Firmware<2405129_000038
HP B5l48a
HP B5l54a Firmware<2405129_000038
HP B5l54a
HP B5l49a Firmware<2405129_000038
HP B5l49a
HP B5l50a Firmware<2405129_000038
HP B5l50a
HP B5l04a Firmware<2405129_000050
HP B5l04a
HP B5l05a Firmware<2405129_000050
HP B5l05a
HP B5l06a Firmware<2405129_000050
HP B5l06a
HP B5l07a Firmware<2405129_000050
HP B5l07a
HP L3u40a Firmware<2405129_000050
HP L3u40a
HP L3u41a Firmware<2405129_000050
HP L3u41a
HP G1w39a Firmware<2405129_000066
HP G1w39a
HP G1w39v Firmware<2405129_000066
HP G1w39v
HP G1w40a Firmware<2405129_000066
HP G1w40a
HP G1w40v Firmware<2405129_000066
HP G1w40v
HP G1w41a Firmware<2405129_000066
HP G1w41a
HP G1w41v Firmware<2405129_000066
HP G1w41v
HP L3u42a Firmware<2405129_000066
HP L3u42a
HP L3u43a Firmware<2405129_000066
HP L3u43a
HP B3g85a Firmware<2405129_000040
HP B3g85a
HP J7x28a Firmware<2405129_000040
HP J7x28a
HP B3g84a Firmware<2405129_000040
HP B3g84a
HP P7z47a Firmware<2405129_000040
HP P7z47a
HP B3g86a Firmware<2405129_000040
HP B3g86a
HP L3u61a Firmware<2405129_000040
HP L3u61a
HP L3u62a Firmware<2405129_000040
HP L3u62a
HP P7z48a Firmware<2405129_000040
HP P7z48a
HP J8j64a Firmware<2405129_000041
HP J8j64a
HP J8j63a Firmware<2405129_000041
HP J8j63a
HP J8j65a Firmware<2405129_000041
HP J8j65a
HP J8j70a Firmware<2405129_000041
HP J8j70a
HP J8j71a Firmware<2405129_000041
HP J8j71a
HP J8j72a Firmware<2405129_000041
HP J8j72a
HP J8j76a Firmware<2405129_000041
HP J8j76a
HP J8j78a Firmware<2405129_000041
HP J8j78a
HP J8j66a Firmware<2405129_000041
HP J8j66a
HP J8j67a Firmware<2405129_000041
HP J8j67a
HP J8j73a Firmware<2405129_000041
HP J8j73a
HP J8j74a Firmware<2405129_000041
HP J8j74a
HP J8j79a Firmware<2405129_000041
HP J8j79a
HP J8j80a Firmware<2405129_000041
HP J8j80a
HP Cz248a Firmware<2405129_000042
HP Cz248a
HP Cz249a Firmware<2405129_000042
HP Cz249a
HP Cz250a Firmware<2405129_000042
HP Cz250a
HP Ca251a Firmware<2405129_000042
HP Ca251a
HP L3u47a Firmware<2405129_000042
HP L3u47a
HP L3u48a Firmware<2405129_000042
HP L3u48a
HP J8a10a Firmware<2405129_000037
HP J8a10a
HP J8a11a Firmware<2405129_000037
HP J8a11a
HP J8a12a Firmware<2405129_000037
HP J8a12a
HP J8a13a Firmware<2405129_000037
HP J8a13a
HP J8a17a Firmware<2405129_000037
HP J8a17a
HP J8a16a Firmware<2405129_000037
HP J8a16a
HP L3u67a Firmware<2405129_000037
HP L3u67a
HP L3u70a Firmware<2405129_000037
HP L3u70a
HP L3u66a Firmware<2405129_000037
HP L3u66a
HP L3u69a Firmware<2405129_000037
HP L3u69a
HP Cf066a Firmware<2405129_000058
HP Cf066a
HP Cf067a Firmware<2405129_000058
HP Cf067a
HP Cf068a Firmware<2405129_000058
HP Cf068a
HP Cf069a Firmware<2405129_000058
HP Cf069a
HP L3u63a Firmware<2405129_000058
HP L3u63a
HP L3u64a Firmware<2405129_000058
HP L3u64a
HP Cc522a Firmware<2405135_000405
HP Cc522a
HP Cc523a Firmware<2405135_000405
HP Cc523a
HP Cc524a Firmware<2405135_000405
HP Cc524a
HP L3u49a Firmware<2405135_000405
HP L3u49a
HP L3u50a Firmware<2405135_000405
HP L3u50a
HP Cf367a Firmware<2405129_000060
HP Cf367a
HP D7p68a Firmware<2405129_000060
HP D7p68a
HP L3u65a Firmware<2405129_000060
HP L3u65a
HP A2w76a Firmware<2405129_000054
HP A2w76a
HP A2w75a Firmware<2405129_000054
HP A2w75a
HP D7p70a Firmware<2405129_000054
HP D7p70a
HP D7p71a Firmware<2405129_000054
HP D7p71a
HP D7p68a Firmware<2405129_000054
HP L3u51a Firmware<2405129_000054
HP L3u51a
HP L3u52a Firmware<2405129_000054
HP L3u52a
HP L3u65a Firmware<2405129_000054
HP X3a69a Firmware<2405347_024815
HP X3a69a
HP X3a68a Firmware<2405347_024815
HP X3a68a
HP Z8z19a Firmware<2405347_024815
HP Z8z19a
HP Z8z18a Firmware<2405347_024815
HP Z8z18a
HP X3a72a Firmware<2405347_024815
HP X3a72a
HP X3a71a Firmware<2405347_024815
HP X3a71a
HP Z8z21a Firmware<2405347_024815
HP Z8z21a
HP Z8z20a Firmware<2405347_024815
HP Z8z20a
HP X3a79a Firmware<2405347_024815
HP X3a79a
HP Z8z23a Firmware<2405347_024815
HP Z8z23a
HP Z8z22a Firmware<2405347_024815
HP Z8z22a
HP X3a75a Firmware<2405347_024815
HP X3a75a
HP X3a74a Firmware<2405347_024815
HP X3a74a
HP X3a59a Firmware<2405347_024821
HP X3a59a
HP X3a60a Firmware<2405347_024821
HP X3a60a
HP Z8z06a Firmware<2405347_024821
HP Z8z06a
HP Z8z07a Firmware<2405347_024821
HP Z8z07a
HP X3a62a Firmware<2405347_024821
HP X3a62a
HP X3a63a Firmware<2405347_024821
HP X3a63a
HP Z8z09a Firmware<2405347_024821
HP Z8z09a
HP Z8z08a Firmware<2405347_024821
HP Z8z08a
HP X3a65a Firmware<2405347_024821
HP X3a65a
HP X3a66a Firmware<2405347_024821
HP X3a66a
HP Z8z11a Firmware<2405347_024821
HP Z8z11a
HP Z8z10a Firmware<2405347_024821
HP Z8z10a
HP X3a87a Firmware<2405347_024814
HP X3a87a
HP X3a86a Firmware<2405347_024814
HP X3a86a
HP Z8z12a Firmware<2405347_024814
HP Z8z12a
HP Z8z13a Firmware<2405347_024814
HP Z8z13a
HP X3a90a Firmware<2405347_024814
HP X3a90a
HP X3a89a Firmware<2405347_024814
HP X3a89a
HP Z8z14a Firmware<2405347_024814
HP Z8z14a
HP Z8z15a Firmware<2405347_024814
HP Z8z15a
HP X3a92a Firmware<2405347_024814
HP X3a92a
HP X3a93a Firmware<2405347_024814
HP X3a93a
HP Z8z16a Firmware<2405347_024814
HP Z8z16a
HP Z8z17a Firmware<2405347_024814
HP Z8z17a
HP X3a78a Firmware<2405347_024820
HP X3a78a
HP X3a77a Firmware<2405347_024820
HP X3a77a
HP Z8z00a Firmware<2405347_024820
HP Z8z00a
HP Z8z01a Firmware<2405347_024820
HP Z8z01a
HP X3a81a Firmware<2405347_024820
HP X3a81a
HP X3a80a Firmware<2405347_024820
HP X3a80a
HP Z8z02a Firmware<2405347_024820
HP Z8z02a
HP Z8z03a Firmware<2405347_024820
HP Z8z03a
HP X3a84a Firmware<2405347_024820
HP X3a84a
HP X3a83a Firmware<2405347_024820
HP X3a83a
HP Z8z05a Firmware<2405347_024820
HP Z8z05a
HP Z8z04a Firmware<2405347_024820
HP Z8z04a
HP L2762a Firmware<2405087_018553
HP L2762a
HP L2683a Firmware<2405087_018552
HP L2683a
Event History
Oct 3, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-5921?
CVE-2018-5921 is classified as a medium severity vulnerability due to its potential for exploitation via Cross Site Request Forgery, which could allow for elevation of privilege.
2
How do I fix CVE-2018-5921?
To remediate CVE-2018-5921, HP recommends updating the firmware of affected printers and MFPs to a version later than 2405129_000052.
3
Which HP printer models are affected by CVE-2018-5921?
CVE-2018-5921 affects various HP printer models such as F2A70A, F2A71A, and B5L26A, specifically on firmware version 2405129_000052 and earlier.
4
Can CVE-2018-5921 be exploited remotely?
Yes, CVE-2018-5921 can potentially be exploited remotely through Cross Site Request Forgery.
5
How was CVE-2018-5921 discovered?
CVE-2018-5921 was identified during routine security assessments of HP printer products.