hp designjet_t920_cr355a_firmware 通过用户控制密钥绕过授权机制
CVE编号
CVE-2021-3965利用情况
暂无补丁情况
N/A披露时间
2022-01-15漏洞描述
Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接 |
|
|---|---|
| https://support.hp.com/us-en/document/ish_5268198-5268230-16 |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t1530_l2y23a_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t1530_l2y24a_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t1530_l2y24b_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t2530_l2y25a_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t2530_l2y26a_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t2530_l2y26b_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t3500_b9e24a_firmware | aeneas_04_09_06.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t3500_b9e24b_firmware | aeneas_04_09_06.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t3500_b9e25a_firmware | aeneas_04_09_06.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t920_cr354a_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t920_cr355a_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t920_cr355b_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t930_l2y21a_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t930_l2y21b_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t930_l2y22a_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_t930_l2y22b_firmware | mry_07_07_04.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6600_f2s71ar_firmware | ptr6_03_07_06.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6600_f2s71a_firmware | ptr6_03_07_06.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6610_2qu13a_firmware | px6_06_05_02.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6610_2qu13b_firmware | px6_06_05_02.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6800_f2s72ar_firmware | ptr8_03_07_06.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6800_f2s72a_firmware | ptr8_03_07_06.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6800_f2s72b_firmware | ptr8_03_07_06.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6810_2qu12a_firmware | px8_06_05_02.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6810_2qu12b_firmware | px8_06_05_02.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6810_2qu14a_firmware | px8_06_05_02.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | hp | designjet_z6810_2qu14b_firmware | px8_06_05_02.1 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | kylinos_aarch64_V10SP1 | kernel | * | Up to (excluding) 4.19.90-23.23.v2101.ky10 | |||||
| 运行在以下环境 | |||||||||
| 系统 | kylinos_aarch64_V10SP2 | kernel | * | Up to (excluding) 4.19.90-25.14.v2101.ky10 | |||||
| 运行在以下环境 | |||||||||
| 系统 | kylinos_x86_64_V10SP1 | kernel | * | Up to (excluding) 4.19.90-23.23.v2101.ky10 | |||||
| 运行在以下环境 | |||||||||
| 系统 | kylinos_x86_64_V10SP2 | kernel | * | Up to (excluding) 4.19.90-25.14.v2101.ky10 | |||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_Leap_15.3 | kernel | * | Up to (excluding) 5.3.18-150300.59.60.4 | |||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_Leap_15.4 | kernel | * | Up to (excluding) 5.3.18-150300.59.60.4 | |||||
| 运行在以下环境 | |||||||||
| 系统 | suse_12_SP5 | kernel | * | Up to (excluding) 4.12.14-122.110.1 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t1530_l2y23a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t1530_l2y24a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t1530_l2y24b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t2530_l2y25a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t2530_l2y26a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t2530_l2y26b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t3500_b9e24a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t3500_b9e24b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t3500_b9e25a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t920_cr354a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t920_cr355a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t920_cr355b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t930_l2y21a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t930_l2y21b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t930_l2y22a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_t930_l2y22b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6600_f2s71a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6600_f2s71ar | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6610_2qu13a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6610_2qu13b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6800_f2s72a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6800_f2s72ar | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6800_f2s72b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6810_2qu12a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6810_2qu12b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6810_2qu14a | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | hp | designjet_z6810_2qu14b | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 无
- 保密性 高
- 完整性 无
| CWE-ID | 漏洞类型 |
| CWE-639 | 通过用户控制密钥绕过授权机制 |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论