CVE-2019-6337
published 2019-11-07CVE-2019-6337: For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a…
PriorityP418medium5.2CVSS 3.1
AVPACLPRNUINSUCHINAL
EPSS
0.40%
31.9th percentile
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
Affected
41 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hp | 2dr21d_firmware | < 001.1937d | 001.1937d |
| hp | d3q15a_firmware | < 001.1937d | 001.1937d |
| hp | d3q15b_firmware | < 001.1937d | 001.1937d |
| hp | d3q15d_firmware | < 001.1937d | 001.1937d |
| hp | d3q16a_firmware | < 001.1937d | 001.1937d |
| hp | d3q16d_firmware | < 001.1937d | 001.1937d |
| hp | d3q17a_firmware | < 001.1937d | 001.1937d |
| hp | d3q17d_firmware | < 001.1937d | 001.1937d |
| hp | d3q19a_firmware | < 001.1937d | 001.1937d |
| hp | d3q19b_firmware | < 001.1937d | 001.1937d |
| hp | d3q19d_firmware | < 001.1937d | 001.1937d |
| hp | d3q20a_firmware | < 001.1937d | 001.1937d |
| hp | d3q20b_firmware | < 001.1937d | 001.1937d |
| hp | d3q20c_firmware | < 001.1937d | 001.1937d |
| hp | d3q20d_firmware | < 001.1937d | 001.1937d |
| hp | d3q21a_firmware | < 001.1937d | 001.1937d |
| hp | d3q21b_firmware | < 001.1937d | 001.1937d |
| hp | d3q21c_firmware | < 001.1937d | 001.1937d |
| hp | d3q21d_firmware | < 001.1937d | 001.1937d |
| hp | d9l63a_firmware | < 001.1937c | 001.1937c |
| hp | d9l64a_firmware | < 001.1937c | 001.1937c |
| hp | j3p65a_firmware | < 001.1937c | 001.1937c |
| hp | j3p68a_firmware | < 001.1937c | 001.1937c |
| hp | j6u51b_firmware | < 001.1937d | 001.1937d |
| hp | j6u55a_firmware | < 001.1937d | 001.1937d |
CVSS provenance
nvdv3.15.2MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
nvdv2.03.3LOWAV:L/AC:M/Au:N/C:P/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-11-07
Published