CVE-2019-6318

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-04-11 · updated 2026-06-17
Weakness: CWE-347

Description

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.

Affected products

HP Color Laserjet Cm4540 Mfp Firmware: before 2309010_581401 — fixed in 2309010_581401
HP Color Laserjet Enterprise Cp5525 Firmware: before 2309010_581402 — fixed in 2309010_581402
HP Color Laserjet Enterprise Flow Mfp M577 Firmware: before 2309010_581408; before 2407081_000571 — fixed in 2309010_581408, 2407081_000571
HP Color Laserjet Enterprise Flow Mfp M680 Firmware: before 2309010_581416; before 2407081_000591 — fixed in 2309010_581416, 2407081_000591
HP Color Laserjet Enterprise Flow Mfp M681 Firmware: before 2407081_000578 — fixed in 2407081_000578
HP Color Laserjet Enterprise Flow Mfp M682 Firmware: before 2407081_000578 — fixed in 2407081_000578
HP Color Laserjet Enterprise Flow Mfp M880Z Firmware: before 2309010_581433; before 2407081_000599 — fixed in 2309010_581433, 2407081_000599
HP Color Laserjet Enterprise M552 Firmware: before 2309010_581409; before 2407081_00060 — fixed in 2309010_581409, 2407081_00060
HP Color Laserjet Enterprise M553 Firmware: before 2309010_581409 — fixed in 2309010_581409
HP Color Laserjet Enterprise M651 Firmware: before 2309010_581418; before 2407081_000585 — fixed in 2309010_581418, 2407081_000585
HP Color Laserjet Enterprise M652 Firmware: before 2407081_000586 — fixed in 2407081_000586
HP Color Laserjet Enterprise M653 Firmware: before 2407081_000586 — fixed in 2407081_000586
HP Color Laserjet Enterprise M750 Firmware: before 2309010_581423 — fixed in 2309010_581423
HP Color Laserjet Enterprise M855 Firmware: before 2309010_581419; before 2407081_000589 — fixed in 2309010_581419, 2407081_000589
HP Color Laserjet Enterprise Mfp M577 Firmware: before 2309010_581408; before 2407081_000571 — fixed in 2309010_581408, 2407081_000571
HP Color Laserjet Enterprise Mfp M680 Firmware: before 2309010_581416; before 2407081_000591 — fixed in 2309010_581416, 2407081_000591
HP Color Laserjet Enterprise Mfp M681 Firmware: before 2407081_000578 — fixed in 2407081_000578
HP Color Laserjet Enterprise Mfp M682 Firmware: before 2407081_000578 — fixed in 2407081_000578
HP Color Laserjet Managed E55040Dw Firmware: before 2407081_000601 — fixed in 2407081_000601
HP Color Laserjet Managed E65050 Firmware: before 2407081_000586 — fixed in 2407081_000586
HP Color Laserjet Managed E65060 Firmware: before 2407081_000586 — fixed in 2407081_000586
HP Color Laserjet Managed Flow Mfp E57540 Firmware: before 2407081_000571 — fixed in 2407081_000571
HP Color Laserjet Managed Flow Mfp E6750 Firmware: before 2407081_000578 — fixed in 2407081_000578
HP Color Laserjet Managed Flow Mfp E67560 Firmware: before 2407081_000578 — fixed in 2407081_000578
HP Color Laserjet Managed Flow Mfp E77822 Firmware: before 2407081_000644 — fixed in 2407081_000644
HP Color Laserjet Managed Flow Mfp E77825 Firmware: before 2407081_000644 — fixed in 2407081_000644
HP Color Laserjet Managed Flow Mfp E77830 Firmware: before 2407081_000644 — fixed in 2407081_000644
HP Color Laserjet Managed Flow Mfp E87640 Firmware: before 2407163_000224 — fixed in 2407163_000224
HP Color Laserjet Managed Flow Mfp E87650 Firmware: before 2407163_000224 — fixed in 2407163_000224
HP Color Laserjet Managed Flow Mfp E87660 Firmware: before 2407163_000224 — fixed in 2407163_000224

How to fix

Upgrade to a fixed version: HP Color Laserjet Cm4540 Mfp Firmware 2309010_581401; HP Color Laserjet Enterprise Cp5525 Firmware 2309010_581402; HP Color Laserjet Enterprise Flow Mfp M577 Firmware 2309010_581408, 2407081_000571; HP Color Laserjet Enterprise Flow Mfp M680 Firmware 2309010_581416, 2407081_000591; HP Color Laserjet Enterprise Flow Mfp M681 Firmware 2407081_000578; HP Color Laserjet Enterprise Flow Mfp M682 Firmware 2407081_000578; HP Color Laserjet Enterprise Flow Mfp M880Z Firmware 2309010_581433, 2407081_000599; HP Color Laserjet Enterprise M552 Firmware 2309010_581409, 2407081_00060; HP Color Laserjet Enterprise M553 Firmware 2309010_581409; HP Color Laserjet Enterprise M651 Firmware 2309010_581418, 2407081_000585; HP Color Laserjet Enterprise M652 Firmware 2407081_000586; HP Color Laserjet Enterprise M653 Firmware 2407081_000586. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-6318 or the next vulnerability affects your stack