HP k0q18a Firmware vulnerabilities

2 CVEs affecting HP k0q18a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-5921, published 2018-10-03.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-2750, published 2018-01-23. Critical severity, CVSS 9.8. EPSS: 9.9% chance of exploitation in the next 30 days. Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP…
• CVE-2018-5921, published 2018-10-03. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and…