CVE-2018-5923

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-03-27 · updated 2026-06-17
Weakness: CWE-347

Description

In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution of arbitrary code.

Affected products

HP Color Laserjet Cm4540 Mfp Firmware: before 2308974_579754 — fixed in 2308974_579754
HP Color Laserjet Cp5525 Firmware: before 2308974_579753 — fixed in 2308974_579753
HP Color Laserjet Enterprise Flow Mfp M681F Firmware: before 2406087_000017 — fixed in 2406087_000017
HP Color Laserjet Enterprise Flow Mfp M681Z Firmware: before 2406087_000017 — fixed in 2406087_000017
HP Color Laserjet Enterprise Flow Mfp M682Z Firmware: before 2406087_000017 — fixed in 2406087_000017
HP Color Laserjet Enterprise M552 Firmware: before 2308974_579763 — fixed in 2308974_579763
HP Color Laserjet Enterprise M553 Firmware: before 2308974_579763 — fixed in 2308974_579763
HP Color Laserjet Enterprise M651 Firmware: before 2406048_029632; before 2308974_579770 — fixed in 2308974_579770, 2406048_029632
HP Color Laserjet Enterprise M652Dn Firmware: before 2406087_000016 — fixed in 2406087_000016
HP Color Laserjet Enterprise M652N Firmware: before 2406087_000016 — fixed in 2406087_000016
HP Color Laserjet Enterprise M653Dh Firmware: before 2406087_000016 — fixed in 2406087_000016
HP Color Laserjet Enterprise M653Dn Firmware: before 2406087_000016 — fixed in 2406087_000016
HP Color Laserjet Enterprise M653X Firmware: before 2406087_000016 — fixed in 2406087_000016
HP Color Laserjet Enterprise M750 Firmware: before 2308974_579776 — fixed in 2308974_579776
HP Color Laserjet Enterprise Mfp M577 Firmware: before 2406048_029627; before 2308974_579760 — fixed in 2308974_579760, 2406048_029627
HP Color Laserjet Enterprise Mfp M681Dh Firmware: before 2406087_000017 — fixed in 2406087_000017
HP Color Laserjet Enterprise Mfp M681F Firmware: before 2406087_000017 — fixed in 2406087_000017
HP Color Laserjet Enterprise Mfp M682Dh Firmware: before 2406087_000017 — fixed in 2406087_000017
HP Color Laserjet M680 Firmware: before 2406048_029633; before 2308974_579771 — fixed in 2308974_579771, 2406048_029633
HP Color Laserjet Managed E55040Dw Firmware: before 2406048_029643 — fixed in 2406048_029643
HP Color Laserjet Managed E65050Dn Firmware: before 2406087_000016 — fixed in 2406087_000016
HP Color Laserjet Managed E65060Dn Firmware: before 2405130_000068 — fixed in 2405130_000068
HP Color Laserjet Managed E65060X Firmware: before 2405130_000068 — fixed in 2405130_000068
HP Color Laserjet Managed Flow Mfp E57540C Firmware: before 2406048_029627 — fixed in 2406048_029627
HP Color Laserjet Managed Flow Mfp E67550F Firmware: before 2406087_000017 — fixed in 2406087_000017
HP Color Laserjet Managed Flow Mfp E67560Z Firmware: before 2406087_000017 — fixed in 2406087_000017
HP Color Laserjet Managed Flow Mfp E77822 Firmware: before 2406048_029616 — fixed in 2406048_029616
HP Color Laserjet Managed Flow Mfp E77825 Firmware: before 2406048_029616 — fixed in 2406048_029616
HP Color Laserjet Managed Flow Mfp E77830Z Firmware: before 2406048_029616 — fixed in 2406048_029616
HP Color Laserjet Managed Flow Mfp E87640 Firmware: before 2406048_029615 — fixed in 2406048_029615

How to fix

Upgrade to a fixed version: HP Color Laserjet Cm4540 Mfp Firmware 2308974_579754; HP Color Laserjet Cp5525 Firmware 2308974_579753; HP Color Laserjet Enterprise Flow Mfp M681F Firmware 2406087_000017; HP Color Laserjet Enterprise Flow Mfp M681Z Firmware 2406087_000017; HP Color Laserjet Enterprise Flow Mfp M682Z Firmware 2406087_000017; HP Color Laserjet Enterprise M552 Firmware 2308974_579763; HP Color Laserjet Enterprise M553 Firmware 2308974_579763; HP Color Laserjet Enterprise M651 Firmware 2308974_579770, 2406048_029632; HP Color Laserjet Enterprise M652Dn Firmware 2406087_000016; HP Color Laserjet Enterprise M652N Firmware 2406087_000016; HP Color Laserjet Enterprise M653Dh Firmware 2406087_000016; HP Color Laserjet Enterprise M653Dn Firmware 2406087_000016. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-5923 or the next vulnerability affects your stack