HP Officejet Pro 6960 t0f28a Firmware vulnerabilities

2 CVEs affecting HP Officejet Pro 6960 t0f28a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-3942, published 2022-12-12.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-3942, published 2022-12-12. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR.
• CVE-2020-28416, published 2021-11-03. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with HP PageWide and OfficeJet printer software installations that could…