TI-2021-02862 Aliases CVE-2021-3965 GHSA-pf8r-282h-75wr

Authorization bypass in HP DesignJet Printer

MEDIUM 41CWE-639Published 2022-01-14 · Updated 2024-08-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · None · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-639.

Summary

Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.

Why it matters now

EPSS 0.05406 92nd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	HP DesignJet Printer	before MRY_07_07_04.1; before AENEAS_04_09_06.1; before PTR8_03_07_06.1; before PX8_06_05_02.1; before PX6_06_05_02.1	—	No fix listed	CNA

HP DesignJet Printer Vendor— Affected before MRY_07_07_04.1; before AENEAS_04_09_06.1; before PTR8_03_07_06.1; before PX8_06_05_02.1; before PX6_06_05_02.1 Fixed in — No fix listed CNA

CPE configurations NVD · 54

CPE	Versions	Role	Vendor
cpe:2.3:o:hp:designjet_t920_cr355a_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t920_cr355a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t920_cr355b_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t920_cr355b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t920_cr354a_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t920_cr354a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t930_l2y22a_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t930_l2y22a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t930_l2y22b_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t930_l2y22b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise

cpe:2.3:o:hp:designjet_t920_cr355a_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t920_cr355a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t920_cr355b_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t920_cr355b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t920_cr354a_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t920_cr354a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t930_l2y22a_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t930_l2y22a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t930_l2y22b_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t930_l2y22b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Show 44 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:hp:designjet_t930_l2y21a_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t930_l2y21a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t930_l2y21b_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t930_l2y21b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t1530_l2y24a_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t1530_l2y24a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t1530_l2y24b_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t1530_l2y24b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t1530_l2y23a_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t1530_l2y23a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t2530_l2y25a_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t2530_l2y25a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t2530_l2y26a_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t2530_l2y26a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t2530_l2y26b_firmware:mry_07_07_04.1:::::::*	mry_07_07_04.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t2530_l2y26b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t3500_b9e24a_firmware:aeneas_04_09_06.1:::::::*	aeneas_04_09_06.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t3500_b9e24a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t3500_b9e24b_firmware:aeneas_04_09_06.1:::::::*	aeneas_04_09_06.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t3500_b9e24b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t3500_b9e25a_firmware:aeneas_04_09_06.1:::::::*	aeneas_04_09_06.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t3500_b9e25a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6800_f2s72a_firmware:ptr8_03_07_06.1:::::::*	ptr8_03_07_06.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6800_f2s72a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6800_f2s72ar_firmware:ptr8_03_07_06.1:::::::*	ptr8_03_07_06.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6800_f2s72ar:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6800_f2s72b_firmware:ptr8_03_07_06.1:::::::*	ptr8_03_07_06.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6800_f2s72b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6600_f2s71a_firmware:ptr6_03_07_06.1:::::::*	ptr6_03_07_06.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6600_f2s71a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6600_f2s71ar_firmware:ptr6_03_07_06.1:::::::*	ptr6_03_07_06.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6600_f2s71ar:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6810_2qu12a_firmware:px8_06_05_02.1:::::::*	px8_06_05_02.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6810_2qu12a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6810_2qu12b_firmware:px8_06_05_02.1:::::::*	px8_06_05_02.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6810_2qu12b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6810_2qu14a_firmware:px8_06_05_02.1:::::::*	px8_06_05_02.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6810_2qu14a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6810_2qu14b_firmware:px8_06_05_02.1:::::::*	px8_06_05_02.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6810_2qu14b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6610_2qu13b_firmware:px6_06_05_02.1:::::::*	px6_06_05_02.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6610_2qu13b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6610_2qu13a_firmware:px6_06_05_02.1:::::::*	px6_06_05_02.1	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6610_2qu13a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise

cpe:2.3:o:hp:designjet_t930_l2y21a_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t930_l2y21a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t930_l2y21b_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t930_l2y21b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t1530_l2y24a_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t1530_l2y24a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t1530_l2y24b_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t1530_l2y24b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t1530_l2y23a_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t1530_l2y23a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t2530_l2y25a_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t2530_l2y25a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t2530_l2y26a_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t2530_l2y26a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t2530_l2y26b_firmware:mry_07_07_04.1:*:*:*:*:*:*:* Versions mry_07_07_04.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t2530_l2y26b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t3500_b9e24a_firmware:aeneas_04_09_06.1:*:*:*:*:*:*:* Versions aeneas_04_09_06.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t3500_b9e24a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t3500_b9e24b_firmware:aeneas_04_09_06.1:*:*:*:*:*:*:* Versions aeneas_04_09_06.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t3500_b9e24b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_t3500_b9e25a_firmware:aeneas_04_09_06.1:*:*:*:*:*:*:* Versions aeneas_04_09_06.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_t3500_b9e25a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6800_f2s72a_firmware:ptr8_03_07_06.1:*:*:*:*:*:*:* Versions ptr8_03_07_06.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6800_f2s72a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6800_f2s72ar_firmware:ptr8_03_07_06.1:*:*:*:*:*:*:* Versions ptr8_03_07_06.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6800_f2s72ar:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6800_f2s72b_firmware:ptr8_03_07_06.1:*:*:*:*:*:*:* Versions ptr8_03_07_06.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6800_f2s72b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6600_f2s71a_firmware:ptr6_03_07_06.1:*:*:*:*:*:*:* Versions ptr6_03_07_06.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6600_f2s71a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6600_f2s71ar_firmware:ptr6_03_07_06.1:*:*:*:*:*:*:* Versions ptr6_03_07_06.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6600_f2s71ar:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6810_2qu12a_firmware:px8_06_05_02.1:*:*:*:*:*:*:* Versions px8_06_05_02.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6810_2qu12a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6810_2qu12b_firmware:px8_06_05_02.1:*:*:*:*:*:*:* Versions px8_06_05_02.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6810_2qu12b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6810_2qu14a_firmware:px8_06_05_02.1:*:*:*:*:*:*:* Versions px8_06_05_02.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6810_2qu14a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6810_2qu14b_firmware:px8_06_05_02.1:*:*:*:*:*:*:* Versions px8_06_05_02.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6810_2qu14b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6610_2qu13b_firmware:px6_06_05_02.1:*:*:*:*:*:*:* Versions px6_06_05_02.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6610_2qu13b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:designjet_z6610_2qu13a_firmware:px6_06_05_02.1:*:*:*:*:*:*:* Versions px6_06_05_02.1 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:designjet_z6610_2qu13a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2021-3965
2026-10-03 Alias added: GHSA-pf8r-282h-75wr

References

Advisory 1

https://support.hp.com/us-en/document/ish_5268198-5268230-16

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences