Description:

HP has released security updates to address multiple vulnerabilities in the following products:

• HP Color Laser 150
• HP Color Laser MFP 178 179
• HP Laser 1003-1008
• HP Laser 103 107 108
• HP Laser MFP 1136-1139 1188
• HP Laser MFP 131 133 135-138
• HP Laser MFP 432
• HP LaserJet MFP M42523-M42625
• HP LaserJet MFP M433
• HP LaserJet MFP M436
• HP LaserJet MFP M437-M443
• HP LaserJet MFP M72625-M72630
• Samsung C1810 Series
• Samsung C1860 Series
• Samsung C3010 Series
• Samsung C3060 Series
• Samsung C401x Series
• Samsung C406x Series
• Samsung C430 Series
• Samsung C480 Series
• Samsung C51x Series
• Samsung C56x Series
• Samsung CLP-680 Series
• Samsung CLX-6260 Series
• Samsung K3250 Series
• Samsung K4350 Series
• Samsung K4355 Series
• Samsung K7600 Series
• Samsung M2020 Series
• Samsung M203x Series
• Samsung M2070 Series
• Samsung M208x Series
• Samsung M262x 282x Series
• Samsung M263x_M284x Series
• Samsung M267x 287x Series
• Samsung M268x_M289x Series
• Samsung M2885 Series
• Samsung M332x 382x 402x Series
• Samsung M333x 383x 404x Series
• Samsung M337x 387x 407x Series
• Samsung M339x 389x 409x Series
• Samsung M403x Series
• Samsung M408x Series
• Samsung M4370 5370 Series
• Samsung M453x Series
• Samsung ML-551x 651x Series
• Samsung SF-760 Series
• Samsung X3220 Series
• Samsung X4300 Series
• Samsung X4305 Series
• Samsung X7600 Series

Threats:

An attacker could exploit these vulnerabilities by doing the following:

• Privilege Escalation

Best practice and Recommendations:

The CERT team encourages users to review HP security advisory and update the affected products:

• https://support.hp.com/us-en/document/ish_8947379-8947403-16/hpsbpi03857