CVE-2019-6326

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have embedded web server attributes which may be potentially vulnerable to Buffer Overflow.

Metrics

CVSS 3.0 7.2/10CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	HP Color LaserJet Pro M280-M281 Multifunction Printer series; HP LaserJet Pro MFP M28-M31 Printer series	before 20190419; before 20190426

References

https://support.hp.com/us-en/document/c06356322Vendor Advisory
https://support.hp.com/us-en/document/c06356322Vendor Advisory

Timeline

Published: Jun 17, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-63279.8HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 201 CVE-2019-63287.8HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files.CVE-2019-63297.8HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files.CVE-2019-63309.8A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.7. This vulnerability CVE-2019-63313.3An issue was found in Samsung Mobile Print (Android) versions prior to 4.08.007. A potential security vulnerability caused by incomplete obf CVE-2019-63324.8A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-CVE-2019-63336.7A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version 4.1.4.2827. This vu CVE-2019-63349.8HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow pot CVE-2019-63357.5A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to cre CVE-2019-63375.2For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the CVE-2019-63388.0In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR Archive_Tar CVE-2019-63399.8In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; A remote code execution vulnerability exists in PH