CVE-2023-35175: SSRF

Published Jun 30, 2023
·
Updated

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.

Affected Software

152 affected components
HP Laserjet Pro Mfp M478-m479 W1a75a Firmware<002_2322c
HP Laserjet Pro Mfp M478-m479 W1a75a
HP Laserjet Pro Mfp M478-m479 W1a76a Firmware<002_2322c
HP Laserjet Pro Mfp M478-m479 W1a76a
HP Laserjet Pro Mfp M478-m479 W1a77a Firmware<002_2322c
HP Laserjet Pro Mfp M478-m479 W1a77a
HP Laserjet Pro Mfp M478-m479 W1a78a Firmware<002_2322c
HP Laserjet Pro Mfp M478-m479 W1a78a
HP Laserjet Pro Mfp M478-m479 W1a79a Firmware<002_2322c
HP Laserjet Pro Mfp M478-m479 W1a79a
HP Laserjet Pro Mfp M478-m479 W1a80a Firmware<002_2322c
HP Laserjet Pro Mfp M478-m479 W1a80a
HP Laserjet Pro Mfp M478-m479 W1a81a Firmware<002_2322c
HP Laserjet Pro Mfp M478-m479 W1a81a
HP Laserjet Pro Mfp M478-m479 W1a82a Firmware<002_2322c
HP Laserjet Pro Mfp M478-m479 W1a82a
HP Laserjet Pro M453-m454 W1y40a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y40a
HP Laserjet Pro M453-m454 W1y41a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y41a
HP Laserjet Pro M453-m454 W1y43a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y43a
HP Laserjet Pro M453-m454 W1y44a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y44a
HP Laserjet Pro M453-m454 W1y45a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y45a
HP Laserjet Pro M453-m454 W1y46a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y46a
HP Laserjet Pro M453-m454 W1y47a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y47a
HP Laserjet Pro M304-m305 W1a46a Firmware<002_2322c
HP Laserjet Pro M304-m305 W1a46a
HP Laserjet Pro M304-m305 W1a47a Firmware<002_2322c
HP Laserjet Pro M304-m305 W1a47a
HP Laserjet Pro M304-m305 W1a48a Firmware<002_2322c
HP Laserjet Pro M304-m305 W1a48a
HP Laserjet Pro M304-m305 W1a66a Firmware<002_2322c
HP Laserjet Pro M304-m305 W1a66a
HP Laserjet Pro M404-m405 93m22a Firmware<002_2322c
HP Laserjet Pro M404-m405 93m22a
HP Laserjet Pro M404-m405 W1a51a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a51a
HP Laserjet Pro M404-m405 W1a52a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a52a
HP Laserjet Pro M404-m405 W1a53a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a53a
HP Laserjet Pro M404-m405 W1a56a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a56a
HP Laserjet Pro M404-m405 W1a57a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a57a
HP Laserjet Pro M404-m405 W1a58a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a58a
HP Laserjet Pro M404-m405 W1a59a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a59a
HP Laserjet Pro M404-m405 W1a60a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a60a
HP Laserjet Pro M404-m405 W1a63a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a63a
HP Laserjet Pro Mfp M428-m429 F W1a29a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a29a
HP Laserjet Pro Mfp M428-m429 F W1a30a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a30a
HP Laserjet Pro Mfp M428-m429 F W1a32a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a32a
HP Laserjet Pro Mfp M428-m429 F W1a34a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a34a
HP Laserjet Pro Mfp M428-m429 F W1a35a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a35a
HP Laserjet Pro Mfp M428-m429 F W1a38a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a38a
HP Laserjet Pro Mfp M428-m429 W1a28a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 W1a28a
HP Laserjet Pro Mfp M428-m429 W1a31a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 W1a31a
HP Laserjet Pro Mfp M428-m429 W1a33a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 W1a33a
All of the following
HP W1a75a Firmware<002_2322c
HP W1a75a
All of the following
HP W1a76a Firmware<002_2322c
HP W1a76a
All of the following
HP W1a77a Firmware<002_2322c
HP W1a77a
All of the following
HP W1a78a Firmware<002_2322c
HP W1a78a
All of the following
HP W1a79a Firmware<002_2322c
HP W1a79a
All of the following
HP W1a80a Firmware<002_2322c
HP W1a80a
All of the following
HP W1a81a Firmware<002_2322c
HP W1a81a
All of the following
HP W1a82a Firmware<002_2322c
HP W1a82a
All of the following
HP Laserjet Pro M453-m454 W1y40a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y40a
All of the following
HP Laserjet Pro M453-m454 W1y41a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y41a
All of the following
HP Laserjet Pro M453-m454 W1y43a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y43a
All of the following
HP Laserjet Pro M453-m454 W1y44a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y44a
All of the following
HP Laserjet Pro M453-m454 W1y45a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y45a
All of the following
HP Laserjet Pro M453-m454 W1y46a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y46a
All of the following
HP Laserjet Pro M453-m454 W1y47a Firmware<002_2322c
HP Laserjet Pro M453-m454 W1y47a
All of the following
HP Laserjet Pro M304-m305 W1a46a Firmware<002_2322c
HP Laserjet Pro M304-m305 W1a46a
All of the following
HP Laserjet Pro M304-m305 W1a47a Firmware<002_2322c
HP Laserjet Pro M304-m305 W1a47a
All of the following
HP Laserjet Pro M304-m305 W1a48a Firmware<002_2322c
HP Laserjet Pro M304-m305 W1a48a
All of the following
HP Laserjet Pro M304-m305 W1a66a Firmware<002_2322c
HP Laserjet Pro M304-m305 W1a66a
All of the following
HP Laserjet Pro M404-m405 93m22a Firmware<002_2322c
HP Laserjet Pro M404-m405 93m22a
All of the following
HP Laserjet Pro M404-m405 W1a51a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a51a
All of the following
HP Laserjet Pro M404-m405 W1a52a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a52a
All of the following
HP Laserjet Pro M404-m405 W1a53a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a53a
All of the following
HP Laserjet Pro M404-m405 W1a56a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a56a
All of the following
HP Laserjet Pro M404-m405 W1a57a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a57a
All of the following
HP Laserjet Pro M404-m405 W1a58a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a58a
All of the following
HP Laserjet Pro M404-m405 W1a59a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a59a
All of the following
HP Laserjet Pro M404-m405 W1a60a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a60a
All of the following
HP Laserjet Pro M404-m405 W1a63a Firmware<002_2322c
HP Laserjet Pro M404-m405 W1a63a
All of the following
HP Laserjet Pro Mfp M428-m429 F W1a29a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a29a
All of the following
HP Laserjet Pro Mfp M428-m429 F W1a30a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a30a
All of the following
HP Laserjet Pro Mfp M428-m429 F W1a32a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a32a
All of the following
HP Laserjet Pro Mfp M428-m429 F W1a34a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a34a
All of the following
HP Laserjet Pro Mfp M428-m429 F W1a35a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a35a
All of the following
HP Laserjet Pro Mfp M428-m429 F W1a38a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 F W1a38a
All of the following
HP Laserjet Pro Mfp M428-m429 W1a28a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 W1a28a
All of the following
HP Laserjet Pro Mfp M428-m429 W1a31a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 W1a31a
All of the following
HP Laserjet Pro Mfp M428-m429 W1a33a Firmware<002_2322c
HP Laserjet Pro Mfp M428-m429 W1a33a

Event History

Jun 30, 2023
CVE Published
via MITRE·03:43 PM
Data Sourced
via MITRE·03:43 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-35175?

CVE-2023-35175 has been classified as a potential vulnerability for remote code execution and elevation of privilege.

2

How do I fix CVE-2023-35175?

To fix CVE-2023-35175, HP recommends updating affected LaserJet Pro firmware to the latest version that addresses this vulnerability.

3

Which products are affected by CVE-2023-35175?

CVE-2023-35175 affects several HP LaserJet Pro print products, specifically those with certain firmware versions under the LaserJet Pro MFP, M453-M454, M304-M305, M404-M405, and M428-M429 series.

4

Can CVE-2023-35175 lead to unauthorized access?

Yes, CVE-2023-35175 could potentially allow unauthorized users to execute remote commands or elevate privileges on the affected LaserJet Pro devices.

5

Is there a known exploitation method for CVE-2023-35175?

The vulnerability CVE-2023-35175 is associated with server-side request forgery (SSRF), which could be exploited through the Web Service Eventing model.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203