CVE-2019-6324: XSS
HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server potentially vulnerable to stored XSS in wireless configuration page
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6324?
CVE-2019-6324 has a medium severity rating due to its potential for stored XSS attacks in affected HP printer models.
How do I fix CVE-2019-6324?
To fix CVE-2019-6324, users should update their HP Color LaserJet Pro M280-M281 and HP LaserJet Pro MFP M28-M31 printer firmware to versions 20190419 or later.
Which HP printer models are affected by CVE-2019-6324?
CVE-2019-6324 affects the HP Color LaserJet Pro M280-M281 and HP LaserJet Pro MFP M28-M31 printer series with firmware prior to the specified update versions.
What type of vulnerability is CVE-2019-6324?
CVE-2019-6324 is a stored cross-site scripting (XSS) vulnerability that can be exploited through the printer's embedded web server.
How can I determine if my printer is vulnerable to CVE-2019-6324?
You can determine vulnerability to CVE-2019-6324 by checking if your HP printer model is running firmware version prior to 20190419 or 20190426.