CVE-2019-6320

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-09 · updated 2026-06-17
Weakness: CWE-352

Description

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.

Affected products

HP Deskjet 3630 F5S43A Firmware: before swp1fn1912br — fixed in swp1fn1912br
HP Deskjet 3630 F5S57A Firmware: before swp1fn1912br — fixed in swp1fn1912br
HP Deskjet 3630 K4T93A Firmware: before swp1fn1912br — fixed in swp1fn1912br
HP Deskjet 3630 K4T99C Firmware: before swp1fn1912br — fixed in swp1fn1912br
HP Deskjet 3630 K4U00B Firmware: before swp1fn1912br — fixed in swp1fn1912br
HP Deskjet 3630 K4U03B Firmware: before swp1fn1912br — fixed in swp1fn1912br
HP Deskjet 3630 V3F21A Firmware: before swp1fn1912br — fixed in swp1fn1912br
HP Deskjet 3630 V3F22A Firmware: before swp1fn1912br — fixed in swp1fn1912br

How to fix

Upgrade to a fixed version: HP Deskjet 3630 F5S43A Firmware swp1fn1912br; HP Deskjet 3630 F5S57A Firmware swp1fn1912br; HP Deskjet 3630 K4T93A Firmware swp1fn1912br; HP Deskjet 3630 K4T99C Firmware swp1fn1912br; HP Deskjet 3630 K4U00B Firmware swp1fn1912br; HP Deskjet 3630 K4U03B Firmware swp1fn1912br; HP Deskjet 3630 V3F21A Firmware swp1fn1912br; HP Deskjet 3630 V3F22A Firmware swp1fn1912br. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-6320 or the next vulnerability affects your stack