TI-2019-04485 Aliases CVE-2019-6319 GHSA-3h84-29wj-g8q3

Cross-site request forgery in Hewlett Packard Enterprise HP DeskJet 3630 All-in-One…

LOW 36CWE-352Published 2020-01-09 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Tampering
Confidentiality · integrity · availability: None · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.

Why it matters now

EPSS 0.00563 47th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hewlett Packard Enterprise	HP DeskJet 3630 All-in-One Printer series	F5S43A - F5S57A; K4T93A - K4T99C; K4U00B - K4U03B; V3F21A - V3F22A	—	No fix listed	CNA

HP DeskJet 3630 All-in-One Printer series VendorHewlett Packard Enterprise Affected F5S43A - F5S57A; K4T93A - K4T99C; K4U00B - K4U03B; V3F21A - V3F22A Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPE	Versions	Role	Vendor
cpe:2.3:o:hp:deskjet_3630_f5s43a_firmware::::::::	before swp1fn1912br	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_f5s43a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_f5s57a_firmware::::::::	before swp1fn1912br	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_f5s57a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_k4t93a_firmware::::::::	before swp1fn1912br	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_k4t93a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_k4t99c_firmware::::::::	before swp1fn1912br	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_k4t99c:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_k4u00b_firmware::::::::	before swp1fn1912br	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_k4u00b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise

cpe:2.3:o:hp:deskjet_3630_f5s43a_firmware:*:*:*:*:*:*:*:* Versions before swp1fn1912br Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_f5s43a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_f5s57a_firmware:*:*:*:*:*:*:*:* Versions before swp1fn1912br Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_f5s57a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_k4t93a_firmware:*:*:*:*:*:*:*:* Versions before swp1fn1912br Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_k4t93a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_k4t99c_firmware:*:*:*:*:*:*:*:* Versions before swp1fn1912br Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_k4t99c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_k4u00b_firmware:*:*:*:*:*:*:*:* Versions before swp1fn1912br Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_k4u00b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Show 6 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:hp:deskjet_3630_k4u03b_firmware::::::::	before swp1fn1912br	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_k4u03b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_v3f21a_firmware::::::::	before swp1fn1912br	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_v3f21a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_v3f22a_firmware::::::::	before swp1fn1912br	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_v3f22a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise

cpe:2.3:o:hp:deskjet_3630_k4u03b_firmware:*:*:*:*:*:*:*:* Versions before swp1fn1912br Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_k4u03b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_v3f21a_firmware:*:*:*:*:*:*:*:* Versions before swp1fn1912br Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_v3f21a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:deskjet_3630_v3f22a_firmware:*:*:*:*:*:*:*:* Versions before swp1fn1912br Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:deskjet_3630_v3f22a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2019-6319
2026-10-03 Alias added: GHSA-3h84-29wj-g8q3

References

Advisory 1

https://support.hp.com/us-en/document/c06308143

TI-2021-02846 Memory corruption in Hewlett Packard Enterprise HP Print products and Digital Sending… CVSS 3.1CRITICAL 9.8
TI-2019-04486 Cross-site request forgery in Hewlett Packard Enterprise HP DeskJet 3630 All-in-One… CVSS 3.1HIGH 8.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences