TI-2023-03769 Aliases CVE-2023-4063 GHSA-gr8j-pcj7-xr6m

Uncontrolled resource consumption in Hewlett Packard Enterprise Certain HP OfficeJet Pro…

LOW 25CWE-400Published 2024-03-22 · Updated 2025-03-28

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · Low
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-400.

Summary

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00574 47th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hewlett Packard Enterprise	Certain HP OfficeJet Pro Printers	See HP Security Bulletin reference for affected versions.	—	No fix listed	CNA

Certain HP OfficeJet Pro Printers VendorHewlett Packard Enterprise Affected See HP Security Bulletin reference for affected versions. Fixed in — No fix listed CNA

CPE configurations NVD · 84

CPE	Versions	Role	Vendor
cpe:2.3:o:hp:1kr42a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr42a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr45a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr45a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr46a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr46a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr48a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr48a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr49a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr49a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise

cpe:2.3:o:hp:1kr42a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr42a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr45a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr45a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr46a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr46a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr48a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr48a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr49a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr49a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Show 74 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:hp:1kr54a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr54a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr55a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr55a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr55b_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr55b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr55d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr55d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr66a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr66a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr67a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr67a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr68a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr68a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr69a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr69a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr69c_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr69c:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr70a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr70a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr71a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr71a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr72a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr72a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr73a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr73a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr73d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr73d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr74a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr74a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr75a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr75a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr76a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr76a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr77a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr77a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr78a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr78a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr78b_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr78b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr79a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr79a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr80d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr80d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk83a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk83a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk83b_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk83b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk84a_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk84a:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk85d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk85d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk86b_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk86b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk90d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk90d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk91b_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk91b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk93d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk93d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk96d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk96d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk97d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk97d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk98d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk98d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk99d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk99d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3ul00d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3ul00d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:3ul05b_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:3ul05b:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise
cpe:2.3:o:hp:y8m28d_firmware::::::::	before 002.2349a	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:y8m28d:-:::::::*	not specified by NVD	Running on	Hewlett Packard Enterprise

cpe:2.3:o:hp:1kr54a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr54a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr55a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr55a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr55b_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr55b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1kr55d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1kr55d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr66a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr66a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr67a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr67a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr68a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr68a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr69a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr69a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr69c_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr69c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr70a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr70a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr71a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr71a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr72a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr72a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr73a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr73a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr73d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr73d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr74a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr74a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr75a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr75a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr76a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr76a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr77a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr77a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr78a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr78a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr78b_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr78b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr79a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr79a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:1mr80d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:1mr80d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk83a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk83a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk83b_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk83b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk84a_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk84a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk85d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk85d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk86b_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk86b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk90d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk90d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk91b_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk91b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk93d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk93d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk96d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk96d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk97d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk97d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk98d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk98d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3uk99d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3uk99d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3ul00d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3ul00d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:3ul05b_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:3ul05b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
cpe:2.3:o:hp:y8m28d_firmware:*:*:*:*:*:*:*:* Versions before 002.2349a Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:y8m28d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-4063
2026-10-03 Alias added: GHSA-gr8j-pcj7-xr6m

References

Advisory 1

https://support.hp.com/us-en/document/ish_10321463-10321488-16/hpsbpi03927

TI-2022-11362 Certain HP Print Products are potentially vulnerable to Remote Code Execution. CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences