Details of VAR-201903-1305

ID

VAR-201903-1305

CVE

CVE-2018-5923

TITLE

plural HP Vulnerabilities related to digital signature verification in products

Trust: 0.8

sources: JVNDB: JVNDB-2018-015219

DESCRIPTION

In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution of arbitrary code. plural HP The product contains a vulnerability related to digital signature verification.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. are a multi-function printer of Hewlett-Packard (HP) in the United States. Security flaws exist in several HP products. An attacker could exploit this vulnerability to execute arbitrary code

Trust: 1.71

sources: NVD: CVE-2018-5923 // JVNDB: JVNDB-2018-015219 // VULHUB: VHN-135955

AFFECTED PRODUCTS

vendor:	hp	model:	color laserjet enterprise m553	scope:	lt	version:	2308974_579763	Trust: 1.0
vendor:	hp	model:	color laserjet managed flow mfp e67550f	scope:	lt	version:	2406087_000017	Trust: 1.0
vendor:	hp	model:	laserjet managed e60065dn	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m725	scope:	lt	version:	2406048_029644	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m608dn	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	color laserjet managed e65060x	scope:	lt	version:	2405130_000068	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m604	scope:	lt	version:	2308974_579762	Trust: 1.0
vendor:	hp	model:	color laserjet managed flow mfp e87650	scope:	lt	version:	2406048_029615	Trust: 1.0
vendor:	hp	model:	laserjet enterprise flow mfp m630z	scope:	lt	version:	2406048_029631	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m630	scope:	lt	version:	2406048_029631	Trust: 1.0
vendor:	hp	model:	color laserjet managed e65060dn	scope:	lt	version:	2405130_000068	Trust: 1.0
vendor:	hp	model:	color laserjet managed mfp e77825	scope:	lt	version:	2406048_029616	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m506	scope:	lt	version:	2308974_579764	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m609dh	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	color laserjet cp5525	scope:	lt	version:	2308974_579753	Trust: 1.0
vendor:	hp	model:	color laserjet managed flow mfp e87660z	scope:	lt	version:	2406048_029615	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color x556xh	scope:	lt	version:	2308974_579766	Trust: 1.0
vendor:	hp	model:	officejet enterprise color x555xh	scope:	lt	version:	2308974_579758	Trust: 1.0
vendor:	hp	model:	pagewide managed color mfp e58650dn	scope:	lt	version:	2406048_029624	Trust: 1.0
vendor:	hp	model:	color laserjet m680	scope:	lt	version:	2308974_579771	Trust: 1.0
vendor:	hp	model:	pagewide managed color flow mfp e77660zts	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m527	scope:	lt	version:	2406048_029628	Trust: 1.0
vendor:	hp	model:	pagewide managed color flow mfp e77660dn	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise flow mfp m682z	scope:	lt	version:	2406087_000017	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise flow mfp m681z	scope:	lt	version:	2406087_000017	Trust: 1.0
vendor:	hp	model:	color laserjet managed flow mfp e77825	scope:	lt	version:	2406048_029616	Trust: 1.0
vendor:	hp	model:	pagewide managed color mfp e77650dn	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise mfp m577	scope:	lt	version:	2406048_029627	Trust: 1.0
vendor:	hp	model:	pagewide managed color flow mfp e77650z	scope:	lt	version:	2406048_029624	Trust: 1.0
vendor:	hp	model:	color laserjet managed mfp e87640	scope:	lt	version:	2406048_029615	Trust: 1.0
vendor:	hp	model:	color laserjet managed flow mfp e67560z	scope:	lt	version:	2406087_000017	Trust: 1.0
vendor:	hp	model:	laserjet enterprise color 500 m551	scope:	lt	version:	2308974_579778	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m633fh	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	pagewide managed color e55650dn	scope:	lt	version:	2308974_579766	Trust: 1.0
vendor:	hp	model:	color laserjet managed mfp e77830dn	scope:	lt	version:	2406048_029616	Trust: 1.0
vendor:	hp	model:	laserjet managed mfp e62555dn	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	color laserjet m680	scope:	lt	version:	2406048_029633	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise m552	scope:	lt	version:	2308974_579763	Trust: 1.0
vendor:	hp	model:	color laserjet managed mfp e87650	scope:	lt	version:	2406048_029615	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color x556dn	scope:	lt	version:	2308974_579766	Trust: 1.0
vendor:	hp	model:	color laserjet managed flow mfp e57540c	scope:	lt	version:	2406048_029627	Trust: 1.0
vendor:	hp	model:	laserjet managed e50045dw	scope:	lt	version:	2406048_029640	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise m651	scope:	lt	version:	2406048_029632	Trust: 1.0
vendor:	hp	model:	pagewide managed color flow mfp e58650z	scope:	lt	version:	2308974_579780	Trust: 1.0
vendor:	hp	model:	laserjet managed mfp e82560dn	scope:	lt	version:	2406048_029617	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m608dh	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color mpf 780f	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	laserjet managed e60075dn	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	digital sender flow 8500 fn2 document capture workstation	scope:	lt	version:	2308937_578483	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m607dn	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e62555dn	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e62565h	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise flow mfp m681f	scope:	lt	version:	2406087_000017	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m631dn	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise mfp m681dh	scope:	lt	version:	2406087_000017	Trust: 1.0
vendor:	hp	model:	color laserjet managed e55040dw	scope:	lt	version:	2406048_029643	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e82550	scope:	lt	version:	2406048_029617	Trust: 1.0
vendor:	hp	model:	officejet enterprise color mfp x585	scope:	lt	version:	2308974_579759	Trust: 1.0
vendor:	hp	model:	laserjet managed mfp e72535dn	scope:	lt	version:	2406048_029614	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m806	scope:	lt	version:	2406048_029646	Trust: 1.0
vendor:	hp	model:	pagewide managed color e75160dn	scope:	lt	version:	2406048_029619	Trust: 1.0
vendor:	hp	model:	laserjet managed e60055dn	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise m653dn	scope:	lt	version:	2406087_000016	Trust: 1.0
vendor:	hp	model:	laserjet enterprise flow mfp m632z	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m806	scope:	lt	version:	2308974_579772	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 800 color m855	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	laserjet enterprise flow mfp m631h	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m608x	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e72525	scope:	lt	version:	2406048_029614	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e72535z	scope:	lt	version:	2406048_029614	Trust: 1.0
vendor:	hp	model:	laserjet managed mfp e82550	scope:	lt	version:	2406048_029617	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m607n	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise m750	scope:	lt	version:	2308974_579776	Trust: 1.0
vendor:	hp	model:	pagewide managed color flow mfp e77660zs	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color flow mfp 586z	scope:	lt	version:	2308974_579780	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color mpf 785zs	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 500 mfp m525f	scope:	lt	version:	2308974_579765	Trust: 1.0
vendor:	hp	model:	laserjet enterprise flow mfp m525c	scope:	lt	version:	2406048_029635	Trust: 1.0
vendor:	hp	model:	officejet enterprise color x555dn	scope:	lt	version:	2308974_579758	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m632h	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	pagewide managed color flow mfp e58650z	scope:	lt	version:	2406048_029624	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 500 mfp m525f	scope:	lt	version:	2406048_029635	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise m652n	scope:	lt	version:	2406087_000016	Trust: 1.0
vendor:	hp	model:	scanjet enterprise 8500 document capture workstation	scope:	lt	version:	2308974_579756	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m631z	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e62575z	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e52545c	scope:	lt	version:	2406048_029628	Trust: 1.0
vendor:	hp	model:	digital sender flow 8500 fn2 document capture workstation	scope:	lt	version:	2406048_029623	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise m653x	scope:	lt	version:	2406087_000016	Trust: 1.0
vendor:	hp	model:	pagewide managed color flow mfp e77650zs	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	color laserjet managed mfp e57540dn	scope:	lt	version:	2406048_029627	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m609dn	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	laserjet enterprise flow mfp m630z	scope:	lt	version:	2308974_579755	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m630	scope:	lt	version:	2308974_579755	Trust: 1.0
vendor:	hp	model:	color laserjet managed mfp e87640dn	scope:	lt	version:	2406048_029615	Trust: 1.0
vendor:	hp	model:	laserjet enterprise flow mfp m633z	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 800 color m855	scope:	lt	version:	2308974_579768	Trust: 1.0
vendor:	hp	model:	scanjet enterprise flow n9120 document flatbed scanner	scope:	lt	version:	2406048_029625	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m527	scope:	lt	version:	2308974_579761	Trust: 1.0
vendor:	hp	model:	laserjet managed e60065x	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	officejet enterprise color x555xh	scope:	lt	version:	2406048_029642	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color mfp 586f	scope:	lt	version:	2308974_579780	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m605	scope:	lt	version:	2308974_579762	Trust: 1.0
vendor:	hp	model:	pagewide managed color mfp e77650dns	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	officejet enterprise color flow mfp x585	scope:	lt	version:	2308974_579759	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color mpf 785f	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 700 m712xh	scope:	lt	version:	2308974_579775	Trust: 1.0
vendor:	hp	model:	officejet enterprise color mfp x585	scope:	lt	version:	2406048_029636	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise mfp m577	scope:	lt	version:	2308974_579760	Trust: 1.0
vendor:	hp	model:	laserjet managed mfp e82540	scope:	lt	version:	2406048_029617	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color flow mfp 586z	scope:	lt	version:	2406048_029624	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e62565z	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	laserjet enterprise flow m830z mfp	scope:	lt	version:	2406048_029645	Trust: 1.0
vendor:	hp	model:	laserjet managed e60075x	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	laserjet enterprise flow mfp m525c	scope:	lt	version:	2308974_579765	Trust: 1.0
vendor:	hp	model:	color laserjet managed flow mfp e77822	scope:	lt	version:	2406048_029616	Trust: 1.0
vendor:	hp	model:	color laserjet managed flow mfp e77830z	scope:	lt	version:	2406048_029616	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise m652dn	scope:	lt	version:	2406087_000016	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 600 m602	scope:	lt	version:	2308974_579777	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m632fht	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	color laserjet managed mfp e87660dn	scope:	lt	version:	2406048_029615	Trust: 1.0
vendor:	hp	model:	pagewide managed color e55650dn	scope:	lt	version:	2406048_029637	Trust: 1.0
vendor:	hp	model:	laserjet enterprise color flow mfp m575c	scope:	lt	version:	2406048_029634	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 800 color mfp m880	scope:	lt	version:	2308974_579767	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise mfp m681f	scope:	lt	version:	2406087_000017	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 600 m601	scope:	lt	version:	2308974_579777	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color x556dn	scope:	lt	version:	2406048_029637	Trust: 1.0
vendor:	hp	model:	laserjet enterprise flow m830z mfp	scope:	lt	version:	2308974_579769	Trust: 1.0
vendor:	hp	model:	laserjet enterprise mfp m725	scope:	lt	version:	2308974_579773	Trust: 1.0
vendor:	hp	model:	color laserjet managed mfp e67550dh	scope:	lt	version:	2406087_000017	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 500 color mfp m575dn	scope:	lt	version:	2406048_029634	Trust: 1.0
vendor:	hp	model:	color laserjet managed e65050dn	scope:	lt	version:	2406087_000016	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 800 color mfp m880	scope:	lt	version:	2406048_029641	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise m651	scope:	lt	version:	2308974_579770	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e82540	scope:	lt	version:	2406048_029617	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m4555 mfp	scope:	lt	version:	2308974_579757	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color mfp 586f	scope:	lt	version:	2406048_029624	Trust: 1.0
vendor:	hp	model:	laserjet managed mfp e62565hs	scope:	lt	version:	2406048_029629	Trust: 1.0
vendor:	hp	model:	color laserjet managed mfp e67560dh	scope:	lt	version:	2406087_000017	Trust: 1.0
vendor:	hp	model:	laserjet managed mfp e72525	scope:	lt	version:	2406048_029614	Trust: 1.0
vendor:	hp	model:	color laserjet managed flow mfp e87640z	scope:	lt	version:	2406048_029615	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color mpf 780dn	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color 765dn	scope:	lt	version:	2406048_029619	Trust: 1.0
vendor:	hp	model:	color laserjet managed flow mfp e87640	scope:	lt	version:	2406048_029615	Trust: 1.0
vendor:	hp	model:	laserjet managed mfp e52545dn	scope:	lt	version:	2406048_029628	Trust: 1.0
vendor:	hp	model:	laserjet managed mfp e72530	scope:	lt	version:	2406048_029614	Trust: 1.0
vendor:	hp	model:	laserjet enterprise color flow mfp m575c	scope:	lt	version:	2308974_579774	Trust: 1.0
vendor:	hp	model:	pagewide managed color mfp e58650dn	scope:	lt	version:	2308974_579780	Trust: 1.0
vendor:	hp	model:	color laserjet managed mfp e77822	scope:	lt	version:	2406048_029616	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color x556xh	scope:	lt	version:	2406048_029637	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 600 m603xh	scope:	lt	version:	2308974_579777	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e82560z	scope:	lt	version:	2406048_029617	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color mfp 586dn	scope:	lt	version:	2406048_029624	Trust: 1.0
vendor:	hp	model:	pagewide managed color flow mfp e77660z	scope:	lt	version:	2406048_029621	Trust: 1.0
vendor:	hp	model:	laserjet managed flow mfp e72530	scope:	lt	version:	2406048_029614	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m608n	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise m653dh	scope:	lt	version:	2406087_000016	Trust: 1.0
vendor:	hp	model:	officejet enterprise color x555dn	scope:	lt	version:	2406048_029642	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 500 color mfp m575dn	scope:	lt	version:	2308974_579774	Trust: 1.0
vendor:	hp	model:	color laserjet enterprise mfp m682dh	scope:	lt	version:	2406087_000017	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m606	scope:	lt	version:	2308974_579762	Trust: 1.0
vendor:	hp	model:	pagewide enterprise color mfp 586dn	scope:	lt	version:	2308974_579780	Trust: 1.0
vendor:	hp	model:	color laserjet cm4540 mfp	scope:	lt	version:	2308974_579754	Trust: 1.0
vendor:	hp	model:	laserjet enterprise 700 color mfp m775	scope:	lt	version:	2308974_579779	Trust: 1.0
vendor:	hp	model:	laserjet enterprise m609x	scope:	lt	version:	2406048_029638	Trust: 1.0
vendor:	hp	model:	officejet enterprise color flow mfp x585	scope:	lt	version:	2406048_029636	Trust: 1.0
vendor:	hewlett packard	model:	hp color laserjet cm4540 mfp	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	hp color laserjet cp5525	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	hp color laserjet enterprise flow mfp m681f	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	hp color laserjet enterprise flow mfp m681z	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	hp color laserjet enterprise flow mfp m682z	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	hp color laserjet enterprise m552	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	hp color laserjet enterprise m553	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	hp color laserjet enterprise m651	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	hp color laserjet enterprise m652dn	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	hp color laserjet enterprise m652n	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2018-015219 // NVD: CVE-2018-5923

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-5923
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2018-5923
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-201903-1062
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-135955
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2018-5923
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-135955
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-5923
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-135955 // JVNDB: JVNDB-2018-015219 // CNNVD: CNNVD-201903-1062 // NVD: CVE-2018-5923

PROBLEMTYPE DATA

problemtype:

CWE-347

Trust: 1.9

sources: VULHUB: VHN-135955 // JVNDB: JVNDB-2018-015219 // NVD: CVE-2018-5923

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201903-1062

TYPE

data forgery

Trust: 0.6

sources: CNNVD: CNNVD-201903-1062

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-015219

PATCH

title:	c06169434	url:	https://support.hp.com/us-en/document/c06169434	Trust: 0.8
title:	Multiple HP Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=90480	Trust: 0.6

sources: JVNDB: JVNDB-2018-015219 // CNNVD: CNNVD-201903-1062

EXTERNAL IDS

db:	NVD	id:	CVE-2018-5923	Trust: 2.5
db:	JVNDB	id:	JVNDB-2018-015219	Trust: 0.8
db:	CNNVD	id:	CNNVD-201903-1062	Trust: 0.7
db:	VULHUB	id:	VHN-135955	Trust: 0.1

sources: VULHUB: VHN-135955 // JVNDB: JVNDB-2018-015219 // CNNVD: CNNVD-201903-1062 // NVD: CVE-2018-5923

REFERENCES

url:	https://support.hp.com/us-en/document/c06169434	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2018-5923	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-5923	Trust: 0.8
url:	https://vigilance.fr/vulnerability/hp-laserjet-code-execution-via-application-signature-checking-28886	Trust: 0.6

sources: VULHUB: VHN-135955 // JVNDB: JVNDB-2018-015219 // CNNVD: CNNVD-201903-1062 // NVD: CVE-2018-5923

SOURCES

db:	VULHUB	id:	VHN-135955
db:	JVNDB	id:	JVNDB-2018-015219
db:	CNNVD	id:	CNNVD-201903-1062
db:	NVD	id:	CVE-2018-5923

LAST UPDATE DATE

2024-11-23T22:58:45.905000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-135955	date:	2019-04-18T00:00:00
db:	JVNDB	id:	JVNDB-2018-015219	date:	2019-05-13T00:00:00
db:	CNNVD	id:	CNNVD-201903-1062	date:	2019-04-19T00:00:00
db:	NVD	id:	CVE-2018-5923	date:	2024-11-21T04:09:42.820

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-135955	date:	2019-03-27T00:00:00
db:	JVNDB	id:	JVNDB-2018-015219	date:	2019-05-13T00:00:00
db:	CNNVD	id:	CNNVD-201903-1062	date:	2019-03-27T00:00:00
db:	NVD	id:	CVE-2018-5923	date:	2019-03-27T16:29:00.420