What’s Vulnerable › Vulnerabilities

CVE-2022-43780

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-12 · updated 2026-06-17
• Weakness: CWE-400

Description

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack.

Affected products

• HP M2U75A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U76A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U77A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U81A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U81B Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U82A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U82B Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U84A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U84B Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U85A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U85B Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U86A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U86B Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U86C Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U87A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U87B Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U88B Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U89B Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U91A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U91B Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U92A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U92B Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U94A Firmware: before 003.2237a — fixed in 003.2237a
• HP M2U94B Firmware: before 003.2237a — fixed in 003.2237a
• HP Z4A54A Firmware: before 003.2237a — fixed in 003.2237a
• HP Z4A59A Firmware: before 003.2237a — fixed in 003.2237a
• HP Z4A60A Firmware: before 003.2237a — fixed in 003.2237a
• HP Z4A61A Firmware: before 003.2237a — fixed in 003.2237a
• HP Z4A61B Firmware: before 003.2237a — fixed in 003.2237a
• HP Z4A69A Firmware: before 003.2237a — fixed in 003.2237a

How to fix

Upgrade to a fixed version: HP M2U75A Firmware 003.2237a; HP M2U76A Firmware 003.2237a; HP M2U77A Firmware 003.2237a; HP M2U81A Firmware 003.2237a; HP M2U81B Firmware 003.2237a; HP M2U82A Firmware 003.2237a; HP M2U82B Firmware 003.2237a; HP M2U84A Firmware 003.2237a; HP M2U84B Firmware 003.2237a; HP M2U85A Firmware 003.2237a; HP M2U85B Firmware 003.2237a; HP M2U86A Firmware 003.2237a. Check the vendor advisory for mitigations.

References

• https://support.hp.com/us-en/document/ish_7095452-7095489-16/hpsbpi03813
• https://support.hp.com/us-en/document/ish_7095452-7095489-16/hpsbpi03813

Get alerted when CVE-2022-43780 or the next vulnerability affects your stack