CVE-2019-6326: Buffer Overflow

Published Jun 17, 2019
·
Updated

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have embedded web server attributes which may be potentially vulnerable to Buffer Overflow.

Affected Software

20 affected components
HP T6b80a Firmware<2019-04-19
HP T6b80a
HP T6b83a Firmware<2019-04-19
HP T6b83a
HP T6b81a Firmware<2019-04-19
HP T6b81a
HP T6b82a Firmware<2019-04-19
HP T6b82a
HP W2g54a Firmware<2019-04-26
HP W2g54a
HP W2g55a Firmware<2019-04-26
HP W2g55a
HP Y5s53a Firmware<2019-04-26
HP Y5s53a
HP Y5s55a Firmware<2019-04-26
HP Y5s55a
HP Y5s50a Firmware<2019-04-26
HP Y5s50a
HP Y5s54a Firmware<2019-04-26
HP Y5s54a

Event History

Jun 17, 2019
CVE Published
via MITRE·03:55 PM
Data Sourced
via MITRE·03:55 PM
DescriptionWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2019-6326?

The severity of CVE-2019-6326 is classified as potentially high due to the buffer overflow vulnerability affecting the embedded web server.

2

How do I fix CVE-2019-6326?

To fix CVE-2019-6326, users should update their HP Color LaserJet Pro and HP LaserJet Pro MFP printer firmware to the latest versions released after April 2019.

3

Which HP printer models are affected by CVE-2019-6326?

The affected models include HP Color LaserJet Pro M280-M281 and HP LaserJet Pro MFP M28-M31 printer series prior to their respective firmware updates.

4

Can CVE-2019-6326 lead to unauthorized access?

Yes, CVE-2019-6326 can potentially allow attackers to leverage the buffer overflow vulnerability for unauthorized access to the printer's web server.

5

Is there a known workaround for CVE-2019-6326?

There are no specific known workarounds for CVE-2019-6326, so applying the firmware update is the recommended solution.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203