What’s Vulnerable › Vulnerabilities
CVE-2021-3942
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-12-12 · updated 2026-06-17
- Weakness: CWE-119
Description
Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR.
Affected products
- HP Color Laserjet Cm4540 Mfp Cc419A Firmware: from 3.0 before 3.9.9 — fixed in 3.9.9
- HP Color Laserjet Cm4540 Mfp Cc420A Firmware: from 3.0 before 3.9.9 — fixed in 3.9.9
- HP Color Laserjet Cm4540 Mfp Cc421A Firmware: from 3.0 before 3.9.9 — fixed in 3.9.9
- HP Color Laserjet Cm5525 Mfp Ce707A Firmware: from 3.0 before 3.9.9 — fixed in 3.9.9
- HP Color Laserjet Cm5525 Mfp Ce708A Firmware: from 3.0 before 3.9.9 — fixed in 3.9.9
- HP Color Laserjet Cm5525 Mfp Ce709A Firmware: from 3.0 before 3.9.9 — fixed in 3.9.9
- HP Color Laserjet Enterprise Flow Mfp M577 B5L46A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M577 B5L47A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M577 B5L48A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M577 B5L54A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M680 Ca251A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M680 Cz248A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M680 Cz249A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M680 Cz250A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M681 J8A10A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M681 J8A11A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M681 J8A12A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M681 J8A13A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M682 J8A16A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M682 J8A17A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M776 T3U55A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M776 T3U56A Firmware: all versions
- HP Color Laserjet Enterprise Flow Mfp M880Z A2W75A Firmware: from 3.0 before 3.9.9; from 4.0 before 4.11.2.3 — fixed in 3.9.9, 4.11.2.3
- HP Color Laserjet Enterprise Flow Mfp M880Z A2W76A Firmware: from 3.0 before 3.9.9; from 4.0 before 4.11.2.3 — fixed in 3.9.9, 4.11.2.3
- HP Color Laserjet Enterprise Flow Mfp M880Z D7P70A Firmware: from 3.0 before 3.9.9; from 4.0 before 4.11.2.3 — fixed in 3.9.9, 4.11.2.3
- HP Color Laserjet Enterprise Flow Mfp M880Z D7P71A Firmware: from 3.0 before 3.9.9; from 4.0 before 4.11.2.3 — fixed in 3.9.9, 4.11.2.3
- HP Color Laserjet Enterprise Flow Mfp M880Z L3U51A Firmware: from 3.0 before 3.9.9; from 4.0 before 4.11.2.3 — fixed in 3.9.9, 4.11.2.3
- HP Color Laserjet Enterprise Flow Mfp M880Z L3U52A Firmware: from 3.0 before 3.9.9; from 4.0 before 4.11.2.3 — fixed in 3.9.9, 4.11.2.3
- HP Color Laserjet Enterprise M553 B5L24A Firmware: from 3.0 before 3.9.9; from 4.0 before 4.11.23; from 5.0 before 5.4 — fixed in 3.9.9, 4.11.23, 5.4
- HP Color Laserjet Enterprise M553 B5L25A Firmware: from 3.0 before 3.9.9; from 4.0 before 4.11.2.3; from 5.0 before 5.4 — fixed in 3.9.9, 4.11.2.3, 5.4
How to fix
Upgrade to a fixed version: HP Color Laserjet Cm4540 Mfp Cc419A Firmware 3.9.9; HP Color Laserjet Cm4540 Mfp Cc420A Firmware 3.9.9; HP Color Laserjet Cm4540 Mfp Cc421A Firmware 3.9.9; HP Color Laserjet Cm5525 Mfp Ce707A Firmware 3.9.9; HP Color Laserjet Cm5525 Mfp Ce708A Firmware 3.9.9; HP Color Laserjet Cm5525 Mfp Ce709A Firmware 3.9.9; HP Color Laserjet Enterprise Flow Mfp M880Z A2W75A Firmware 3.9.9, 4.11.2.3; HP Color Laserjet Enterprise Flow Mfp M880Z A2W76A Firmware 3.9.9, 4.11.2.3; HP Color Laserjet Enterprise Flow Mfp M880Z D7P70A Firmware 3.9.9, 4.11.2.3; HP Color Laserjet Enterprise Flow Mfp M880Z D7P71A Firmware 3.9.9, 4.11.2.3; HP Color Laserjet Enterprise Flow Mfp M880Z L3U51A Firmware 3.9.9, 4.11.2.3; HP Color Laserjet Enterprise Flow Mfp M880Z L3U52A Firmware 3.9.9, 4.11.2.3. Check the vendor advisory for mitigations.
References
- https://support.hp.com/us-en/document/ish_5948778-5949142-16/hpsbpi03780
- https://support.hp.com/us-en/document/ish_5948778-5949142-16/hpsbpi03780
Get alerted when CVE-2021-3942 or the next vulnerability affects your stack