TI-2022-21514 Aliases CVE-2022-43780 GHSA-7p9m-p78c-278w

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack.

MEDIUM 41CWE-400Published 2022-11-15 · Updated 2025-04-30

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-400.

Summary

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00934 60th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hewlett Packard Enterprise	Certain HP ENVY, OfficeJet, and DeskJet printers	See HP Security Bulletin reference for affected versions.	—	No fix listed	CNA

Certain HP ENVY, OfficeJet, and DeskJet printers VendorHewlett Packard Enterprise Affected See HP Security Bulletin reference for affected versions. Fixed in — No fix listed CNA

CPE configurations NVD · 82

CPE	Versions	Role	Vendor
cpe:2.3:o:hp:m2u75a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u75a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u76a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u76a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u77a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u77a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u81a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u81a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u81b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u81b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise

cpe:2.3:o:hp:m2u75a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u75a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u76a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u76a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u77a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u77a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u81a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u81a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u81b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u81b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Show 72 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:hp:m2u82a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u82a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u82b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u82b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u84a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u84a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u84b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u84b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u85a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u85a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u85b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u85b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u86a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u86a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u86b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u86b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u86c_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u86c:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u87a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u87a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u87b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u87b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u88b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u88b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u89b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u89b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u91a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u91a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u91b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u91b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u92a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u92a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u92b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u92b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u94a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u94a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u94b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u94b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a54a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a54a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a59a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a59a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a60a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a60a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a61a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a61a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a61b_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a61b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a69a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a69a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a70a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a70a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a71a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a71a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a73a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a73a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a74a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a74a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b12a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b12a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b13a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b13a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b14a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b14a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b18a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b18a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b27a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b27a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b28a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b28a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b29a_firmware::::::::	before 003.2237a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b29a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise

cpe:2.3:o:hp:m2u82a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u82a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u82b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u82b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u84a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u84a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u84b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u84b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u85a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u85a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u85b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u85b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u86a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u86a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u86b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u86b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u86c_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u86c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u87a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u87a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u87b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u87b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u88b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u88b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u89b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u89b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u91a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u91a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u91b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u91b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u92a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u92a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u92b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u92b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u94a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u94a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:m2u94b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:m2u94b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a54a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a54a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a59a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a59a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a60a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a60a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a61a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a61a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a61b_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a61b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a69a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a69a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a70a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a70a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a71a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a71a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a73a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a73a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4a74a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4a74a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b12a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b12a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b13a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b13a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b14a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b14a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b18a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b18a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b27a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b27a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b28a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b28a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:z4b29a_firmware:*:*:*:*:*:*:*:* Versions before 003.2237a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:z4b29a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2022-43780
2026-10-03 Alias added: GHSA-7p9m-p78c-278w

References

Advisory 1

https://support.hp.com/us-en/document/ish_7095452-7095489-16/hpsbpi03813

TI-2022-11362 Certain HP Print Products are potentially vulnerable to Remote Code Execution. CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack.

Key facts

Summary

Why it matters now

SSVC decision points

Affected products

CPE configurations NVD · 82

Remediation

Timeline

References

Advisory 1

More Hewlett Packard Enterprise M2u75a Firmware vulnerabilities

Sources