What is the CVSS score of CVE-2018-5924?

CVE-2018-5924 has a CVSS 3.0 base score of 9.8 (Critical). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 12.2%.

T8X44 Firmware CVE-2018-5924

CRITICAL

Out-of-bounds Write (CWE-787)

2018-08-13 hp-security-alert@hp.com

HP Memory Corruption RCE Buffer Overflow T8X44 Firmware 3Aw51A Firmware A9U28B Firmware D3A82A Firmware V1N08A Firmware Y5H80A Firmware D4H24B Firmware F5S57A Firmware K4T99B Firmware K4U04B Firmware T8X39 Firmware 1Sh08 Firmware 3Aw44A Firmware A9U19A Firmware D3A78B Firmware 4Uj28B Firmware V1N01A Firmware Y5H60A Firmware D4H22A Firmware J6U57B Firmware J9V82A Firmware J9V82B Firmware J9V82C Firmware J9V82D Firmware Y3Z57 Firmware W1B33 Firmware W1B39 Firmware W1B37 Firmware W1B38 Firmware J6U55A Firmware J6U55B Firmware J6U55C Firmware J6U55D Firmware Y3Z45 Firmware Y3Z47 Firmware J9V80A Firmware J9V80B Firmware D3Q15A Firmware D3Q15B Firmware D3Q15D Firmware D3Q17A Firmware D3Q17C Firmware D3Q17D Firmware Y3Z46 Firmware Y3Z44 Firmware D3Q19A Firmware D3Q19D Firmware D3Q20A Firmware D3Q20B Firmware D3Q20C Firmware D3Q20D Firmware D3Q21A Firmware D3Q21C Firmware D3Q21D Firmware K9Z76A Firmware K9Z76D Firmware W1B31 Firmware Y3Z54 Firmware D3Q16A Firmware D3Q16B Firmware D3Q16C Firmware D3Q16D Firmware Cn459A Firmware Cn463A Firmware Cn460A Firmware Cn461A Firmware Cv037A Firmware Cn598A Firmware N9M07A Firmware Cq891A Firmware Cq891B Firmware Cq891C Firmware Cq891Ar Firmware Cq890A Firmware Cq890B Firmware Cq890C Firmware Cq890D Firmware Cq890E Firmware Cq890Ar Firmware Cq893A Firmware Cq893B Firmware Cq893C Firmware Cq893E Firmware Cq893Ar Firmware F9A29A Firmware F9A29B Firmware T5D66A Firmware F9A28A Firmware F9A28B Firmware 1Jl02B Firmware 1Jl02A Firmware T5D67A Firmware J9V86A Firmware T8W51A Firmware A9J41 Firmware F0V64 Firmware J6U63 Firmware W3U23 Firmware F5S65A Firmware L8L91A Firmware M2U86 Firmware M2U76 Firmware B9S57C Firmware F5S60A Firmware T0A23A Firmware M2Q28A Firmware P0R21A Firmware X3B09A Firmware 2Nd31A Firmware A9U23 Firmware V1N02A Firmware Y5Z00A Firmware F5S43 Firmware K9U05B Firmware 1Dt61A Firmware 3Yz74A Firmware 4Sc29A Firmware J9V87A Firmware T8W35A Firmware F5R96A Firmware K7V42C Firmware Cz283A Firmware Cz284A Firmware B4L08A Firmware F1H97 Firmware Cz282A Firmware G0V48B Firmware G0V48C Firmware Cz276A Firmware Cq176 Firmware A9T80A Firmware A9T80B Firmware A9T89A Firmware D3P93A Firmware K9H48 Firmware F0V63 Firmware F0V67 Firmware K9T01 Firmware J6U59 Firmware J6U69 Firmware K9H57 Firmware W3U25 Firmware M2U85 Firmware M2U91 Firmware Z4A54 Firmware A9J40A Firmware D4J85B Firmware G0V47 Firmware G0450 Firmware K7C84 Firmware K7G86 Firmware B9S56A Firmware B9S58A Firmware F8B05A Firmware F8B13A Firmware F8B04A Firmware F8B06A Firmware F8B12A Firmware E4W43 Firmware K7G18A Firmware K7G93A Firmware Z6Z11A Firmware Z4B53A Firmware Z6Z95A Firmware Z6Z97A Firmware Cz993A Firmware L9B95A Firmware N4L14C Firmware N4K99C Firmware Cz992A Firmware L9D57A Firmware N4L17A Firmware N4L18C Firmware D4H21A Firmware D4H25A Firmware F5R95 Firmware F5S00 Firmware K7V35 Firmware Cr771A Firmware Cz152A Firmware Cz294A Firmware B4L03 Firmware D4J74 Firmware F1H96 Firmware F1J00 Firmware F9D36 Firmware K9V76 Firmware V6D27 Firmware M2U75 Firmware M2U81 Firmware Z4B12 Firmware B9S76 Firmware F8B09 Firmware T1P36 Firmware E3E03A Firmware C9S13A Firmware Cn581A Firmware Cn583A Firmware F0M65A Firmware G1W52A Firmware P4C78A Firmware T3P03A Firmware T3P04A Firmware J7K33A Firmware T0F28A Firmware T0G25A Firmware Cr768A Firmware G3J47A Firmware Cr769A Firmware G1X85A Firmware Cv136A Firmware Cr7770A Firmware Cz292A Firmware Cz293A Firmware E3E02A Firmware J2D37A Firmware J7K34A Firmware T0F29A Firmware Y0s18a Firmware Y0s19a Firmware G5j38a Firmware T1P99 Firmware T1Q00 Firmware D9l63a Firmware D9l64a Firmware T0g70a Firmware J3p68a Firmware Cm749A Firmware Cm750A Firmware Cn577A Firmware A7F64A Firmware D7Z36A Firmware E1D34A Firmware J5T77A Firmware T0K98A Firmware A7F65A Firmware D7Z37A Firmware A7F66A Firmware E2D42A Firmware E1D36A Firmware D9l18a Firmware J6x76a Firmware J6x80a Firmware K7s37a Firmware M9l65a Firmware M9l70a Firmware M9L81A Firmware T0G45A Firmware D9L19A Firmware J7A28A Firmware J7A31A Firmware K7S34A Firmware M9L73A Firmware M9L80A Firmware T0G50A Firmware T0G54A Firmware T6T77A Firmware D9l20a Firmware T0g56a Firmware K7s42a Firmware Cq176A Firmware Cq183A Firmware Cx042 Firmware Cq761A Firmware Cx017A Firmware Cz025A Firmware Cz045A Firmware Cn216A Firmware Z4B07A Firmware Z4B56A Firmware

9.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Aug 13, 2018 - 15:29 nvd

CRITICAL 9.8

DescriptionNVD

A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code execution.

AnalysisAI

A security vulnerability has been identified with certain HP Inkjet printers. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code execution. Affected products include: Hp T8X44 Firmware, Hp 3Aw51A Firmware, Hp A9U28B Firmware, Hp D3A82A Firmware, Hp V1N08A Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).