CVE-2019-6318: HP Color Laserjet CM4540 Mfp Firmware

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.

Affected products

  • HP Color Laserjet CM4540 Mfp Firmware: before 2309010_581401 (fixed in 2309010_581401)
  • HP Color Laserjet Enterprise CP5525 Firmware: before 2309010_581402 (fixed in 2309010_581402)
  • HP Color Laserjet Enterprise Flow Mfp m577 Firmware: before 2309010_581408 (fixed in 2309010_581408); before 2407081_000571 (fixed in 2407081_000571)
  • HP Color Laserjet Enterprise Flow Mfp m680 Firmware: before 2309010_581416 (fixed in 2309010_581416); before 2407081_000591 (fixed in 2407081_000591)
  • HP Color Laserjet Enterprise Flow Mfp m681 Firmware: before 2407081_000578 (fixed in 2407081_000578)
  • HP Color Laserjet Enterprise Flow Mfp m682 Firmware: before 2407081_000578 (fixed in 2407081_000578)
  • HP Color Laserjet Enterprise Flow Mfp m880z Firmware: before 2309010_581433 (fixed in 2309010_581433); before 2407081_000599 (fixed in 2407081_000599)
  • HP Color Laserjet Enterprise m552 Firmware: before 2309010_581409 (fixed in 2309010_581409); before 2407081_00060 (fixed in 2407081_00060)
  • HP Color Laserjet Enterprise m553 Firmware: before 2309010_581409 (fixed in 2309010_581409)
  • HP Color Laserjet Enterprise m651 Firmware: before 2309010_581418 (fixed in 2309010_581418); before 2407081_000585 (fixed in 2407081_000585)
  • HP Color Laserjet Enterprise m652 Firmware: before 2407081_000586 (fixed in 2407081_000586)
  • HP Color Laserjet Enterprise m653 Firmware: before 2407081_000586 (fixed in 2407081_000586)
  • HP Color Laserjet Enterprise m750 Firmware: before 2309010_581423 (fixed in 2309010_581423)
  • HP Color Laserjet Enterprise m855 Firmware: before 2309010_581419 (fixed in 2309010_581419); before 2407081_000589 (fixed in 2407081_000589)
  • HP Color Laserjet Enterprise Mfp m577 Firmware: before 2309010_581408 (fixed in 2309010_581408); before 2407081_000571 (fixed in 2407081_000571)
  • HP Color Laserjet Enterprise Mfp m680 Firmware: before 2309010_581416 (fixed in 2309010_581416); before 2407081_000591 (fixed in 2407081_000591)
  • HP Color Laserjet Enterprise Mfp m681 Firmware: before 2407081_000578 (fixed in 2407081_000578)
  • HP Color Laserjet Enterprise Mfp m682 Firmware: before 2407081_000578 (fixed in 2407081_000578)
  • HP Color Laserjet Managed e55040dw Firmware: before 2407081_000601 (fixed in 2407081_000601)
  • HP Color Laserjet Managed e65050 Firmware: before 2407081_000586 (fixed in 2407081_000586)
  • HP Color Laserjet Managed e65060 Firmware: before 2407081_000586 (fixed in 2407081_000586)
  • HP Color Laserjet Managed Flow Mfp e57540 Firmware: before 2407081_000571 (fixed in 2407081_000571)
  • HP Color Laserjet Managed Flow Mfp e6750 Firmware: before 2407081_000578 (fixed in 2407081_000578)
  • HP Color Laserjet Managed Flow Mfp e67560 Firmware: before 2407081_000578 (fixed in 2407081_000578)
  • HP Color Laserjet Managed Flow Mfp e77822 Firmware: before 2407081_000644 (fixed in 2407081_000644)
  • and 118 more

Published 2019-04-11. Last modified 2026-06-17.