What is the CVSS score of CVE-2022-28721?

CVE-2022-28721 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 1.6%.

M2U86A Firmware CVE-2022-28721

CRITICAL

2022-09-26 hp-security-alert@hp.com

HP RCE M2U86A Firmware M2U86B Firmware M2U86C Firmware M2U87A Firmware M2U87B Firmware M2U88B Firmware M2U89B Firmware M2U76A Firmware M2U77A Firmware 5Se522A Firmware 5Sd78A Firmware 5Sd79A Firmware M2U85B Firmware Z4A59A Firmware Z4A71A Firmware M2U91B Firmware Z4A69A Firmware M2U92B Firmware Z4A70A Firmware M2U94B Firmware Z4A73A Firmware Z4A74A Firmware M2U91A Firmware M2U92A Firmware M2U85A Firmware M2U94A Firmware Z4A54A Firmware Z4A60A Firmware Z4A61A Firmware Z4A61B Firmware 5Se17A Firmware 6Wd35A Firmware 7Cz37A Firmware 5Se18A Firmware 5Se16A Firmware 5Se19A Firmware 5Se20A Firmware 8Qq97A Firmware 8Qq98A Firmware 8Qq99A Firmware 223N6A Firmware 2K4V8A Firmware 2K4W1A Firmware 2K4W2A Firmware 223N2A Firmware 223N1A Firmware 223N5A Firmware 223N9A Firmware 223R6A Firmware 2K5L5A Firmware 223R2A Firmware 223R1A Firmware 223R3A Firmware 223R9A Firmware K7G22A Firmware K7G18A Firmware K7G23A Firmware Y0K15A Firmware K7D05A Firmware Z3M37A Firmware K7G93A Firmware Z3M52A Firmware 3Xd89A Firmware K7G95A Firmware K7G96A Firmware K7G99A Firmware K7R96A Firmware K7S00A Firmware K7S08A Firmware K7S01A Firmware 5Se46A Firmware 6Wd14A Firmware 6Wd16A Firmware 5Se47A Firmware 5Se45A Firmware 5Se48A Firmware 7Xk12A Firmware 5Se50A Firmware 8Qq86A Firmware 8Qq87A Firmware 8Qq88A Firmware M2U81A Firmware Z4B29A Firmware M2U81B Firmware Z4B27A Firmware M2U82B Firmware Z4B28A Firmware M2U84B Firmware M2U82A Firmware M2U75A Firmware M2U84A Firmware Z4B12A Firmware Z4B13A Firmware Z4B14A Firmware Z4B18A Firmware P4C78A Firmware P4C85A Firmware T3P03A Firmware P4C86A Firmware P4C81A Firmware P4C82A Firmware P4C84A Firmware T0G25A Firmware T0G26A Firmware 1Kr69A Firmware 1Kr58A Firmware 228F5A Firmware 3Uc65A Firmware 1K7K6A Firmware J7K33A Firmware T0F30A Firmware T0F32A Firmware T0F38A Firmware T0F31A Firmware J7K37A Firmware J7K38A Firmware J7K35A Firmware J7K39A Firmware T0F28A Firmware T0F36A Firmware J7K34A Firmware T0F33A Firmware T0F39A Firmware T0F34A Firmware T0F35A Firmware J7K40A Firmware J7K36A Firmware J7K42A Firmware J7K41A Firmware T0F29A Firmware T0F37A Firmware T0F40A Firmware G5j56a Firmware Y0s18a Firmware L3t99a Firmware Y0s19a Firmware G5j38a Firmware T1p99a Firmware 1Kr62A Firmware 5Lj17A Firmware 5Lj18A Firmware 5Lj19A Firmware 1Kr57A Firmware 1Kr61A Firmware 1K7K7A Firmware 3Uc64A Firmware 5Lj14A Firmware 5Lj15A Firmware 5Lj16A Firmware 3Uc66A Firmware 4Kj65A Firmware 5Lj23A Firmware 1L0H6A Firmware 1L0H7A Firmware 1L0H8A Firmware D9l63a Firmware D9l64a Firmware J3p65a Firmware J3p66a Firmware J3p67a Firmware J3p68a Firmware T0g70a Firmware D9l20a Firmware K7s32a Firmware D9l21a Firmware K7s42a Firmware T0g65a Firmware K7s39a Firmware J6x83a Firmware K7s43a Firmware K7s40a Firmware K7s41a Firmware 1Kr46A Firmware 3Uk83A Firmware 1Kr49A Firmware 1Kr42A Firmware 1Kr45A Firmware 3Uk84A Firmware 1Kr48A Firmware 1Kr54A Firmware 1Kr55A Firmware 257G3A Firmware 1Mr78A Firmware 1Mr66A Firmware 1Mr67A Firmware 1Mr69A Firmware 1Mr70A Firmware 1Mr71A Firmware 1Mr72A Firmware 1Mr73A Firmware 1Mr74A Firmware 1Mr75A Firmware 1Mr76A Firmware 1Mr77A Firmware 1Mr68A Firmware 1Mr79A Firmware 226Y9A Firmware 1G5M0A Firmware 4Sb23A Firmware 3Yw71A Firmware 3Yw74A Firmware 1Tj09A Firmware 3Yw70A Firmware 1Tj10A Firmware 1Tj11A Firmware 3Yw73A Firmware 6Hf11A Firmware 1Tj12A Firmware 3Yw72A Firmware 3Yw75A Firmware Y0F71A Firmware Y0F72A Firmware Y0F73A Firmware 7Xv38A Firmware Y0F74A Firmware 3Yw48A Firmware 3Yw51A Firmware 3Dp64A Firmware 3Dp65A Firmware 3Dp66A Firmware 3Yf56A Firmware 3Yf57A Firmware 3Yf58A Firmware 3Yf60A Firmware 3Yf61A Firmware 2Ry54A Firmware 2Ry55A Firmware 2Ry56A Firmware 3Yf65A Firmware 3Yf66A Firmware 3Yf67A Firmware 3Yf68A Firmware 3Yf69A Firmware 3Yf70A Firmware 3Yf59A Firmware W1A75A Firmware W1A76A Firmware W1A77A Firmware W1A81A Firmware W1A82A Firmware W1A79A Firmware W1A80A Firmware W1A78A Firmware W1Y40A Firmware W1Y41A Firmware W1Y46A Firmware W1Y47A Firmware W1Y44A Firmware W1Y45A Firmware W1Y43A Firmware W1A66A Firmware W1A46A Firmware W1A47A Firmware W1A48A Firmware W1A51A Firmware W1A53A Firmware W1A56A Firmware W1A63A Firmware W1A52A Firmware 93M22A Firmware W1A58A Firmware W1A59A Firmware W1A60A Firmware W1A57A Firmware W1A29A Firmware W1A32A Firmware W1A30A Firmware W1A38A Firmware W1A34A Firmware W1A35A Firmware W1A28A Firmware W1A31A Firmware W1A33A Firmware J6U57A Firmware J9V80A Firmware J6U55A Firmware J6U51B Firmware J6U55B Firmware J9V82A Firmware W1B28A Firmware Y3Z45A Firmware W1B29A Firmware Y3Z47A Firmware Y3Z57A Firmware W1B33A Firmware W1B39A Firmware W1B37A Firmware W1B38A Firmware D3Q15A Firmware D3Q16A Firmware D3Q19A Firmware D3Q20A Firmware D3Q17A Firmware D3Q21A Firmware K9Z76A Firmware Y3Z44A Firmware A7W93A Firmware Y3Z46A Firmware Y3Z54A Firmware W1B31A Firmware

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Sep 26, 2022 - 15:15 nvd

CRITICAL 9.8

DescriptionNVD

Certain HP Print Products are potentially vulnerable to Remote Code Execution.

AnalysisAI

Certain HP Print Products are potentially vulnerable to Remote Code Execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

Certain HP Print Products are potentially vulnerable to Remote Code Execution. Affected products include: Hp M2U86A Firmware, Hp M2U86B Firmware, Hp M2U86C Firmware, Hp M2U87A Firmware, Hp M2U87B Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.