CVE-2022-4894

Home/CVE/Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontro

CVE

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontro

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element.

HIGH · CVSS 7.3 EPSS 0.00138

Schedule remediation

CVSS base score ≥ 7.0

Sigma rules0 YARA rules0

⬡

Weakness Classification

CWE-427Uncontrolled Search Path Element

▤

Affected Products & Versions

hp 2zn49a firmwareall versions
hp 2zn50a firmwareall versions
hp 2ky38a firmwareall versions
hp w7u01a firmwareall versions
hp w7u02a firmwareall versions
hp 1vr14a firmwareall versions
hp 7uq76a firmwareall versions
hp 7ab26a firmwareall versions
Show all 60 affected productshp 7zb25a firmwareall versions
hp 7zb72a firmwareall versions
hp 8af49a firmwareall versions
hp 8af50a firmwareall versions
hp 8af51a firmwareall versions
hp 8af52a firmwareall versions
hp 7zb20a firmwareall versions
hp 7zb19a firmwareall versions
hp 7zb21a firmwareall versions
hp 4zb81a firmwareall versions
hp 5ue14a firmwareall versions
hp 209u7a firmwareall versions
hp 4zb79a firmwareall versions
hp 4zb80a firmwareall versions
hp 4zb92a firmwareall versions
hp 4zb93a firmwareall versions
hp 4zb82a firmwareall versions
hp 6hu10a firmwareall versions
hp 5ue15a firmwareall versions
hp 4zb83a firmwareall versions
hp 6hu11a firmwareall versions
hp 4zb85a firmwareall versions
hp 4zb87a firmwareall versions
hp 4zb86a firmwareall versions
hp 9vv52a firmwareall versions
hp 4zb84a firmwareall versions
hp 6hu12a firmwareall versions
hp 4zb91a firmwareall versions
hp 4zb88a firmwareall versions
hp 4zb89a firmwareall versions
hp 4zb90a firmwareall versions
hp 4zb94a firmwareall versions
hp 4zb95a firmwareall versions
hp 4zb96a firmwareall versions
hp 4zb97a firmwareall versions
hp 6hu08a firmwareall versions
hp 6hu09a firmwareall versions
hp 714z6a firmwareall versions
hp 714z7a firmwareall versions
hp 714z8a firmwareall versions
hp 714z9a firmwareall versions
hp 715a0a firmwareall versions
hp 715a1a firmwareall versions
hp 715a2a firmwareall versions
hp 715a3a firmwareall versions
hp 715a4a firmwareall versions
hp 715a5a firmwareall versions
hp 715a6a firmwareall versions
samsung 3a9x1a\#ab1 firmwareall versions
samsung 3a9x2a\#301 firmwareall versions
samsung 3a9x3a\#ab1 firmwareall versions
samsung 3a9x4a\#ab1 firmwareall versions

▣

Scoring & Timeline

7.3

HIGH · CVSS v3.1 · hp-security-alert@hp.com

View on NVD

Attack Vector

Network Adjacent Local Physical

Attack Complexity

Low High

Privileges Required

None Low High

User Interaction

None Required

Scope

Unchanged Changed

Confidentiality

None Low High

Integrity

None Low High

Availability

None Low High

Published to NVD16 Aug 2023 · 09:15 PM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

🔗

References & Sources

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

https://support.hp.com/us-en/document/ish_8947379-8947403-16/hpsbpi03857Vendor Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin