CVE-2019-18912

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart Firmware bundle version 4.9 or 4.9.0.1 the potential vulnerability may cause instability in the solution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Nov 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-189136.8A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide CVE-2019-189146.1A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site ScriptiCVE-2019-189157.8A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version 1.4.33. This vulnerCVE-2019-189167.8A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printers) which may lead tCVE-2019-189176.5A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout.CVE-2019-18927.5A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches cCVE-2019-189227.5A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticatedCVE-2019-189236.1Insufficient content type validation of proxied resources in go-camo before 2.1.1 allows a remote attacker to serve arbitrary content from gCVE-2019-189245.3Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations),CVE-2019-189259.8Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication.CVE-2019-189266.1Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting (XSS). A user input (CVE-2019-189289.8Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentic
CVE-2019-18912: High severity, CVSS 7.8 | Vulnix