CVE-2020-28419

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-11-09 · updated 2026-06-17

Description

During installation with certain driver software or application packages an arbitrary code execution could occur.

Affected products

HP Laserjet Managed Mfp E62665 Firmware: before 49.1.4424 — fixed in 49.1.4424
HP Color Laserjet Cm4540 Mfp Firmware: before 61.111.01.9108 — fixed in 61.111.01.9108
HP Color Laserjet Enterprise Flow Mfp M577 Firmware: before 16.0.19233.658 — fixed in 16.0.19233.658
HP Color Laserjet Enterprise Flow Mfp M680 Firmware: before 10.0.15324.199 — fixed in 10.0.15324.199
HP Color Laserjet Enterprise Flow Mfp M880Z Firmware: before 11.0.19232.882 — fixed in 11.0.19232.882
HP Color Laserjet Enterprise M455 Firmware: before 52.1.4899 — fixed in 52.1.4899
HP Color Laserjet Enterprise M552 Firmware: before 14.0.19241.351 — fixed in 14.0.19241.351
HP Color Laserjet Enterprise M553 Firmware: before 14.0.19232.485 — fixed in 14.0.19232.485
HP Color Laserjet Enterprise M651 Firmware: before 10.0.16007.5 — fixed in 10.0.16007.5
HP Color Laserjet Enterprise M750 Firmware: before 9.0.15316.203 — fixed in 9.0.15316.203
HP Color Laserjet Enterprise M855 Firmware: before 11.0.16058.821 — fixed in 11.0.16058.821
HP Color Laserjet Enterprise M856 Firmware: before 50.1.4584 — fixed in 50.1.4584
HP Color Laserjet Enterprise Mfp M480: before 52.1.4899 — fixed in 52.1.4899
HP Color Laserjet Enterprise Mfp M577 Firmware: before 16.0.19235.653 — fixed in 16.0.19235.653
HP Color Laserjet Enterprise Mfp M680 Firmware: before 10.0.15324.194 — fixed in 10.0.15324.194
HP Color Laserjet Managed E45028 Firmware: before 52.1.4899 — fixed in 52.1.4899
HP Color Laserjet Managed E75245 Firmware: before 49.1.4431 — fixed in 49.1.4431
HP Color Laserjet Managed E85055 Firmware: before 50.1.4584 — fixed in 50.1.4584
HP Color Laserjet Managed Flow Mfp E62675 Firmware: before 49.1.4424 — fixed in 49.1.4424
HP Color Laserjet Managed Flow Mfp E67550 Firmware: before 43.2.2509 — fixed in 43.2.2509
HP Color Laserjet Managed Flow Mfp E67560 Firmware: before 43.2.2509 — fixed in 43.2.2509
HP Color Laserjet Managed Flow Mfp M680 Firmware: before 10.0.15324.199 — fixed in 10.0.15324.199
HP Color Laserjet Managed Flow Mfp M880Zm Firmware: before 11.0.19232.882 — fixed in 11.0.19232.882
HP Color Laserjet Managed M553 Firmware: before 14.0.19232.485 — fixed in 14.0.19232.485
HP Color Laserjet Managed M651 Firmware: before 10.0.16007.5 — fixed in 10.0.16007.5
HP Color Laserjet Managed Mfp E62655 Firmware: before 49.1.4424 — fixed in 49.1.4424
HP Color Laserjet Managed Mfp E67550 Firmware: before 43.2.2509 — fixed in 43.2.2509
HP Color Laserjet Managed Mfp E67560 Firmware: before 43.2.2509 — fixed in 43.2.2509
HP Color Laserjet Managed Mfp E67650 Firmware: before 49.1.4424 — fixed in 49.1.4424
HP Color Laserjet Managed Mfp E77422: before 50.1.4533 — fixed in 50.1.4533

How to fix

Upgrade to a fixed version: HP Laserjet Managed Mfp E62665 Firmware 49.1.4424; HP Color Laserjet Cm4540 Mfp Firmware 61.111.01.9108; HP Color Laserjet Enterprise Flow Mfp M577 Firmware 16.0.19233.658; HP Color Laserjet Enterprise Flow Mfp M680 Firmware 10.0.15324.199; HP Color Laserjet Enterprise Flow Mfp M880Z Firmware 11.0.19232.882; HP Color Laserjet Enterprise M455 Firmware 52.1.4899; HP Color Laserjet Enterprise M552 Firmware 14.0.19241.351; HP Color Laserjet Enterprise M553 Firmware 14.0.19232.485; HP Color Laserjet Enterprise M651 Firmware 10.0.16007.5; HP Color Laserjet Enterprise M750 Firmware 9.0.15316.203; HP Color Laserjet Enterprise M855 Firmware 11.0.16058.821; HP Color Laserjet Enterprise M856 Firmware 50.1.4584. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-28419 or the next vulnerability affects your stack