HIGH🇵🇱 Wersja polska

CVE-2022-4894

CVSS 7.3v3.1pub. 2023-08-16upd. 2024-11-21

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

  • HP 1vr14a

    HW
    Hp
    all versions

  • HP 1vr14a Firmware

    OS
    Hp
    all versions

  • HP 209u7a

    HW
    Hp
    all versions

  • HP 209u7a Firmware

    OS
    Hp
    all versions

  • HP 2ky38a

    HW
    Hp
    all versions

  • HP 2ky38a Firmware

    OS
    Hp
    all versions

  • HP 2zn49a

    HW
    Hp
    all versions

  • HP 2zn49a Firmware

    OS
    Hp
    all versions

  • HP 2zn50a

    HW
    Hp
    all versions

  • HP 2zn50a Firmware

    OS
    Hp
    all versions

  • HP 4zb79a

    HW
    Hp
    all versions

  • HP 4zb79a Firmware

    OS
    Hp
    all versions

  • HP 4zb80a

    HW
    Hp
    all versions

  • HP 4zb80a Firmware

    OS
    Hp
    all versions

  • HP 4zb81a

    HW
    Hp
    all versions

  • HP 4zb81a Firmware

    OS
    Hp
    all versions

  • HP 4zb82a

    HW
    Hp
    all versions

  • HP 4zb82a Firmware

    OS
    Hp
    all versions

  • HP 4zb83a

    HW
    Hp
    all versions

  • HP 4zb83a Firmware

    OS
    Hp
    all versions

  • HP 4zb84a

    HW
    Hp
    all versions

  • HP 4zb84a Firmware

    OS
    Hp
    all versions

  • HP 4zb85a

    HW
    Hp
    all versions

  • HP 4zb85a Firmware

    OS
    Hp
    all versions

  • HP 4zb86a

    HW
    Hp
    all versions

  • HP 4zb86a Firmware

    OS
    Hp
    all versions

  • HP 4zb87a

    HW
    Hp
    all versions

  • HP 4zb87a Firmware

    OS
    Hp
    all versions

  • HP 4zb88a

    HW
    Hp
    all versions

  • HP 4zb88a Firmware

    OS
    Hp
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-2268MEDIUM6.9same product

The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially ...

CVE-2017-5638CRITICAL9.8⚠ KEVPL ✓same vendor

RCE w Apache Struts 2 poprzez błędną obsługę nagłówków HTTP (Jakarta Multipart parser)

CVE-2015-3113CRITICAL9.8⚠ KEVPL ✓same vendor

RCE w Adobe Flash Player — heap-based buffer overflow (CVE-2015-3113)

CVE-2013-4810CRITICAL9.8⚠ KEVPL ✓same vendor

RCE przez EJBInvokerServlet/JMXInvokerServlet w HP ProCurve Manager

CVE-2012-1823CRITICAL9.8⚠ KEVPL ✓same vendor

RCE w PHP-CGI poprzez wstrzyknięcie opcji wiersza poleceń