What’s Vulnerable › Vulnerabilities

CVE-2022-28722

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-26 · updated 2026-06-17
• Weakness: CWE-120

Description

Certain HP Print Products are potentially vulnerable to Buffer Overflow.

Affected products

• HP A7W93A Firmware: before 006.2225a — fixed in 006.2225a
• HP D3Q15A Firmware: before 2228b — fixed in 2228b
• HP D3Q16A Firmware: before 2228b — fixed in 2228b
• HP D3Q17A Firmware: before 2228b — fixed in 2228b
• HP D3Q19A Firmware: before 2228b — fixed in 2228b
• HP D3Q20A Firmware: before 2228b — fixed in 2228b
• HP D3Q21A Firmware: before 2228b — fixed in 2228b
• HP D9L18A Firmware: before 001.2224b — fixed in 001.2224b
• HP D9L20A Firmware: before d9l20a — fixed in d9l20a
• HP D9L21A Firmware: before 001.2225b — fixed in 001.2225b
• HP D9L63A Firmware: before 001.2225b — fixed in 001.2225b
• HP D9L64A Firmware: before 001.2225b — fixed in 001.2225b
• HP G5J38A Firmware: before 002.2226a — fixed in 002.2226a
• HP G5J56A Firmware: before 003.2226a — fixed in 003.2226a
• HP J3P65A Firmware: before 001.2225b — fixed in 001.2225b
• HP J3P66A Firmware: before 001.2225b — fixed in 001.2225b
• HP J3P67A Firmware: before 001.2225b — fixed in 001.2225b
• HP J3P68A Firmware: before 001.2225b — fixed in 001.2225b
• HP J6U51B Firmware: before 2228b — fixed in 2228b
• HP J6U55A Firmware: before 2228b — fixed in 2228b
• HP J6U55B Firmware: before 2228b — fixed in 2228b
• HP J6U57A Firmware: before 2228b — fixed in 2228b
• HP J6X76A Firmware: before 001.2224b — fixed in 001.2224b
• HP J6X77A Firmware: before 001.2224b — fixed in 001.2224b
• HP J6X78A Firmware: before 001.2224b — fixed in 001.2224b
• HP J6X79A Firmware: before 001.2224b — fixed in 001.2224b
• HP J6X80A Firmware: before 001.2224b — fixed in 001.2224b
• HP J6X81A Firmware: before 001.2224b — fixed in 001.2224b
• HP J6X83A Firmware: before 001.2225b — fixed in 001.2225b
• HP J7K33A Firmware: before 001.2225a — fixed in 001.2225a

How to fix

Upgrade to a fixed version: HP A7W93A Firmware 006.2225a; HP D3Q15A Firmware 2228b; HP D3Q16A Firmware 2228b; HP D3Q17A Firmware 2228b; HP D3Q19A Firmware 2228b; HP D3Q20A Firmware 2228b; HP D3Q21A Firmware 2228b; HP D9L18A Firmware 001.2224b; HP D9L20A Firmware d9l20a; HP D9L21A Firmware 001.2225b; HP D9L63A Firmware 001.2225b; HP D9L64A Firmware 001.2225b. Check the vendor advisory for mitigations.

References

• https://support.hp.com/us-en/document/ish_6839789-6839813-16/hpsbpi03810
• https://support.hp.com/us-en/document/ish_6839789-6839813-16/hpsbpi03810

Get alerted when CVE-2022-28722 or the next vulnerability affects your stack