Hp W1A78A Firmware vulnerabilities

CVE-2023-35175 [CRITICAL] CWE-918 CVE-2023-35175: Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.

CVE-2022-28721 [CRITICAL] CVE-2022-28721: Certain HP Print Products are potentially vulnerable to Remote Code Execution. Certain HP Print Products are potentially vulnerable to Remote Code Execution.

CVE-2023-27972 [CRITICAL] CWE-120 CVE-2023-27972: Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote C Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.

CVE-2023-27973 [CRITICAL] CWE-787 CVE-2023-27973: Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Cod Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.

CVE-2022-24292 [CRITICAL] CVE-2022-24292: Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, o Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.

CVE-2022-24293 [CRITICAL] CVE-2022-24293: Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, o Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.

CVE-2023-27971 [CRITICAL] CWE-120 CVE-2023-27971: Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevatio Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.

CVE-2023-35177 [HIGH] CWE-787 CVE-2023-35177: Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow r Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.

CVE-2023-35176 [HIGH] CWE-120 CVE-2023-35176: Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial o Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.

CVE-2023-35178 [HIGH] CWE-120 CVE-2023-35178: Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.

CVE-2022-24291 [HIGH] CVE-2022-24291: Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, o Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.

CVE-2025-12785 [HIGH] CWE-200 CVE-2025-12785: Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential e Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.

CVE-2024-5143 [MEDIUM] CWE-306 CVE-2024-5143: A user with device administrative privileges can change existing SMTP server settings on the device, A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed.

CVE-2025-43018 [MEDIUM] CWE-200 CVE-2025-43018: Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticate Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book.

CVE-2025-12784 [MEDIUM] CWE-200 CVE-2025-12784: Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential e Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.