CVE-2022-24292
9.8
CRITICAL · CVSS 3.1 · EPSS 7.3% (pctl 94)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 7.35% — more likely to be exploited than 94% of all CVEs |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2022-03-23 |
| Last modified | 2026-06-25 |
Affected (40)
| Vendor | Product |
|---|---|
| hp | laserjet pro m304-m305 w1a46a |
| hp | laserjet pro m304-m305 w1a46a firmware |
| hp | laserjet pro m304-m305 w1a47a |
| hp | laserjet pro m304-m305 w1a47a firmware |
| hp | laserjet pro m304-m305 w1a48a |
| hp | laserjet pro m304-m305 w1a48a firmware |
| hp | laserjet pro m304-m305 w1a51a firmware |
| hp | laserjet pro m304-m305 w1a66a |
| hp | laserjet pro m304-m305 w1a66a firmware |
| hp | laserjet pro m404-m405 w1a51a |
| hp | laserjet pro m453-m454 w1y40a |
| hp | laserjet pro m453-m454 w1y40a firmware |
| hp | laserjet pro m453-m454 w1y41a |
| hp | laserjet pro m453-m454 w1y41a firmware |
| hp | laserjet pro m453-m454 w1y43a |
| hp | laserjet pro m453-m454 w1y43a firmware |
| hp | laserjet pro m453-m454 w1y44a |
| hp | laserjet pro m453-m454 w1y44a firmware |
| hp | laserjet pro m453-m454 w1y45a |
| hp | laserjet pro m453-m454 w1y45a firmware |
| hp | laserjet pro m453-m454 w1y46a |
| hp | laserjet pro m453-m454 w1y46a firmware |
| hp | laserjet pro m453-m454 w1y47a |
| hp | laserjet pro m453-m454 w1y47a firmware |
| hp | w1a75a |
| hp | w1a75a firmware |
| hp | w1a76a |
| hp | w1a76a firmware |
| hp | w1a77a |
| hp | w1a77a firmware |
| hp | w1a78a |
| hp | w1a78a firmware |
| hp | w1a79a |
| hp | w1a79a firmware |
| hp | w1a80a |
| hp | w1a80a firmware |
| hp | w1a81a |
| hp | w1a81a firmware |
| hp | w1a82a |
| hp | w1a82a firmware |
References
→ the Explorer · watch your stack · NVD