What’s Vulnerable › Vulnerabilities

CVE-2023-4063

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-22 · updated 2026-06-17
• Weakness: CWE-400

Description

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request.

Affected products

• HP 1Kr42A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Kr45A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Kr46A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Kr48A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Kr49A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Kr54A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Kr55A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Kr55B Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Kr55D Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr66A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr67A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr68A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr69A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr69C Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr70A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr71A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr72A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr73A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr73D Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr74A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr75A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr76A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr77A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr78A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr78B Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr79A Firmware: before 002.2349a — fixed in 002.2349a
• HP 1Mr80D Firmware: before 002.2349a — fixed in 002.2349a
• HP 3Uk83A Firmware: before 002.2349a — fixed in 002.2349a
• HP 3Uk83B Firmware: before 002.2349a — fixed in 002.2349a
• HP 3Uk84A Firmware: before 002.2349a — fixed in 002.2349a

How to fix

Upgrade to a fixed version: HP 1Kr42A Firmware 002.2349a; HP 1Kr45A Firmware 002.2349a; HP 1Kr46A Firmware 002.2349a; HP 1Kr48A Firmware 002.2349a; HP 1Kr49A Firmware 002.2349a; HP 1Kr54A Firmware 002.2349a; HP 1Kr55A Firmware 002.2349a; HP 1Kr55B Firmware 002.2349a; HP 1Kr55D Firmware 002.2349a; HP 1Mr66A Firmware 002.2349a; HP 1Mr67A Firmware 002.2349a; HP 1Mr68A Firmware 002.2349a. Check the vendor advisory for mitigations.

References

• https://support.hp.com/us-en/document/ish_10321463-10321488-16/hpsbpi03927
• https://support.hp.com/us-en/document/ish_10321463-10321488-16/hpsbpi03927

Get alerted when CVE-2023-4063 or the next vulnerability affects your stack