CVE-2018-5921: HP a2w75a Firmware

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.

Affected products

  • HP a2w75a Firmware: before 2405129_000054 (fixed in 2405129_000054)
  • HP a2w76a Firmware: before 2405129_000054 (fixed in 2405129_000054)
  • HP a2w77a Firmware: before 2405129_000057 (fixed in 2405129_000057)
  • HP a2w78a Firmware: before 2405129_000057 (fixed in 2405129_000057)
  • HP a2w79a Firmware: before 2405129_000057 (fixed in 2405129_000057)
  • HP b3g84a Firmware: before 2405129_000040 (fixed in 2405129_000040)
  • HP b3g85a Firmware: before 2405129_000040 (fixed in 2405129_000040)
  • HP b3g86a Firmware: before 2405129_000040 (fixed in 2405129_000040)
  • HP b5l04a Firmware: before 2405129_000050 (fixed in 2405129_000050)
  • HP b5l05a Firmware: before 2405129_000050 (fixed in 2405129_000050)
  • HP b5l06a Firmware: before 2405129_000050 (fixed in 2405129_000050)
  • HP b5l07a Firmware: before 2405129_000050 (fixed in 2405129_000050)
  • HP b5l26a Firmware: before 2405129_000056 (fixed in 2405129_000056)
  • HP b5l39a Firmware: before 2405129_000056 (fixed in 2405129_000056)
  • HP b5l46a Firmware: before 2405129_000038 (fixed in 2405129_000038)
  • HP b5l47a Firmware: before 2405129_000038 (fixed in 2405129_000038)
  • HP b5l48a Firmware: before 2405129_000038 (fixed in 2405129_000038)
  • HP b5l49a Firmware: before 2405129_000038 (fixed in 2405129_000038)
  • HP b5l50a Firmware: before 2405129_000038 (fixed in 2405129_000038)
  • HP b5l54a Firmware: before 2405129_000038 (fixed in 2405129_000038)
  • HP c2s11a Firmware: before 2405129_000055 (fixed in 2405129_000055)
  • HP c2s11v Firmware: before 2405129_000055 (fixed in 2405129_000055)
  • HP c2s12a Firmware: before 2405129_000055 (fixed in 2405129_000055)
  • HP c2s12v Firmware: before 2405129_000055 (fixed in 2405129_000055)
  • HP CA251A Firmware: before 2405129_000042 (fixed in 2405129_000042)
  • and 169 more

Published 2018-10-03. Last modified 2026-06-17.