HP CD645A Firmware vulnerabilities

3 CVEs affecting HP CD645A Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-5921, published 2018-10-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-2750, published 2018-01-23. Critical severity, CVSS 9.8. EPSS: 9.9% chance of exploitation in the next 30 days. Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP…
CVE-2017-2743, published 2018-01-23. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before…
CVE-2018-5921, published 2018-10-03. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and…