CVE-2019-6324: HP t6b80a Firmware

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server potentially vulnerable to stored XSS in wireless configuration page

Affected products

• HP t6b80a Firmware: before 2019-04-19 (fixed in 2019-04-19)
• HP t6b81a Firmware: before 2019-04-19 (fixed in 2019-04-19)
• HP t6b82a Firmware: before 2019-04-19 (fixed in 2019-04-19)
• HP t6b83a Firmware: before 2019-04-19 (fixed in 2019-04-19)
• HP w2g54a Firmware: before 2019-04-26 (fixed in 2019-04-26)
• HP w2g55a Firmware: before 2019-04-26 (fixed in 2019-04-26)
• HP y5s50a Firmware: before 2019-04-26 (fixed in 2019-04-26)
• HP y5s53a Firmware: before 2019-04-26 (fixed in 2019-04-26)
• HP y5s54a Firmware: before 2019-04-26 (fixed in 2019-04-26)
• HP y5s55a Firmware: before 2019-04-26 (fixed in 2019-04-26)

Published 2019-06-17. Last modified 2026-06-17.