What’s Vulnerable › Vulnerabilities

CVE-2023-1526

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-04-28 · updated 2026-06-17

Description

Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer.

Affected products

• HP Designjet Z6 Firmware: before jgr6_09_22_51.2 — fixed in jgr6_09_22_51.2
• HP Designjet Z6Dr Firmware: before jgr6_09_22_51.2 — fixed in jgr6_09_22_51.2
• HP Designjet Z9+ Pro Firmware: all versions
• HP Designjet Z9 Firmware: before jgr9_09_22_51.2 — fixed in jgr9_09_22_51.2
• HP Designjet Z9Dr Firmware: before jgr9_09_22_51.2 — fixed in jgr9_09_22_51.2
• HP Pagewide Xl 4100: _firmware
• HP Pagewide Xl 4500: _firmware
• HP Pagewide Xl 4600: _firmware
• HP Pagewide Xl 4700: _firmware
• HP Pagewide Xl 8000: _firmware

How to fix

Upgrade to a fixed version: HP Designjet Z6 Firmware jgr6_09_22_51.2; HP Designjet Z6Dr Firmware jgr6_09_22_51.2; HP Designjet Z9 Firmware jgr9_09_22_51.2; HP Designjet Z9Dr Firmware jgr9_09_22_51.2. Check the vendor advisory for mitigations.

References

• https://support.hp.com/us-en/document/ish_7869666-7869691-16/hpsbpi03837
• https://support.hp.com/us-en/document/ish_7869666-7869691-16/hpsbpi03837

Get alerted when CVE-2023-1526 or the next vulnerability affects your stack