What’s Vulnerable › Vulnerabilities

CVE-2022-28721

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-26 · updated 2026-06-17

Description

Certain HP Print Products are potentially vulnerable to Remote Code Execution.

Affected products

• HP 1G5M0A Firmware: before 005.2210a — fixed in 005.2210a
• HP 1K7K6A Firmware: before 004.2222a — fixed in 004.2222a
• HP 1K7K7A Firmware: before 004.2222a — fixed in 004.2222a
• HP 1Kr42A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Kr45A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Kr46A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Kr48A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Kr49A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Kr54A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Kr55A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Kr57A Firmware: before 001.2213a — fixed in 001.2213a
• HP 1Kr58A Firmware: before 001.2213a — fixed in 001.2213a
• HP 1Kr61A Firmware: before 001.2213a — fixed in 001.2213a
• HP 1Kr62A Firmware: before 001.2213a — fixed in 001.2213a
• HP 1Kr69A Firmware: before 001.2213a — fixed in 001.2213a
• HP 1L0H6A Firmware: before 004.2222a — fixed in 004.2222a
• HP 1L0H7A Firmware: before 004.2222a — fixed in 004.2222a
• HP 1L0H8A Firmware: before 004.2222a — fixed in 004.2222a
• HP 1Mr66A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr67A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr68A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr69A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr70A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr71A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr72A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr73A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr74A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr75A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr76A Firmware: before 002.2211c — fixed in 002.2211c
• HP 1Mr77A Firmware: before 002.2211c — fixed in 002.2211c

How to fix

Upgrade to a fixed version: HP 1G5M0A Firmware 005.2210a; HP 1K7K6A Firmware 004.2222a; HP 1K7K7A Firmware 004.2222a; HP 1Kr42A Firmware 002.2211c; HP 1Kr45A Firmware 002.2211c; HP 1Kr46A Firmware 002.2211c; HP 1Kr48A Firmware 002.2211c; HP 1Kr49A Firmware 002.2211c; HP 1Kr54A Firmware 002.2211c; HP 1Kr55A Firmware 002.2211c; HP 1Kr57A Firmware 001.2213a; HP 1Kr58A Firmware 001.2213a. Check the vendor advisory for mitigations.

References

• https://support.hp.com/us-en/document/ish_6839789-6839813-16/hpsbpi03810
• https://support.hp.com/us-en/document/ish_6839789-6839813-16/hpsbpi03810

Get alerted when CVE-2022-28721 or the next vulnerability affects your stack